last executing test programs:

13m41.322744752s ago: executing program 32 (id=311):
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x4040800)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
r5 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x20081)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=<r6=>0xffffffffffffffff)
ioctl$MEDIA_REQUEST_IOC_QUEUE(r6, 0x7c80, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="2a0000f128000000", 0x8}], 0x1}}], 0x1, 0x20000054)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fanotify_init(0x200, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[])
r7 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r7, 0x0, 0x0)

11m7.752252165s ago: executing program 0 (id=1112):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1d4c, 0x0, 0x11)

11m6.981019223s ago: executing program 0 (id=1119):
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400})
unshare(0x24060400)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a10, 0x1000008, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x1, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x101, 0x2, 0x200, 0x2, 0x400009, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x4, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0xd, 0x0, 0x8000, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x2, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x3ff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x7, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x48, 0x2, 0x3, 0x4, 0x7, 0x6d80, 0x80, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa3, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x3, 0xfffffff8, 0x401, 0x2, 0x200, 0x7, 0x4edf, 0x5, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
syz_open_dev$loop(&(0x7f0000000100), 0x10001, 0x204242)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0})
r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x60a802)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe17}, 0x50)

11m5.625071199s ago: executing program 0 (id=1135):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000071c0)={&(0x7f0000007040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000007180)={&(0x7f0000007080)=@upd={0xe0, 0x12, 0x1, 0x70bd2d, 0x25dfdbff, {{'ghash-generic\x00'}, '\x00', '\x00', 0x2400, 0x3c00}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)

11m5.280205914s ago: executing program 0 (id=1138):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$inet6(0xa, 0x80002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

11m2.166370636s ago: executing program 0 (id=1169):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket(0x11, 0x3, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000)
openat$drirender128(0xffffffffffffff9c, 0x0, 0x101800, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
getpgid(0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000001c0)={@hyper})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f00000000c0)={&(0x7f0000000f00)=[0x2, 0xe0, 0x20400000, 0xff, 0x7, 0x2, 0x9, 0x5, 0x80, 0x4, 0x2, 0x0, 0x5, 0x3a4d, 0x2800, 0x486, 0x5, 0x5a, 0x7, 0x7, 0xfffffff9, 0x4, 0x2, 0x0, 0xfff, 0x9, 0xffff0001, 0x3, 0x4, 0xb9b2, 0x441, 0x6, 0x3, 0x7, 0x8, 0xfffffff8, 0x0, 0xfffffffe, 0x9, 0x8, 0x3, 0x2, 0x1ff, 0x9, 0x2, 0x8, 0x1000, 0x7, 0x1, 0x5, 0x1, 0xf91, 0x0, 0x9, 0x9, 0x7, 0xb, 0x7, 0x7, 0x8000, 0xb80, 0x4, 0x9f, 0x1, 0x5, 0xc41, 0x8, 0x2, 0x1ff, 0x5, 0x7, 0xff76, 0x4, 0xf, 0x6, 0x7, 0x8, 0x3, 0x4, 0x6, 0x4, 0x7fffffff, 0x3, 0x47, 0x7, 0x8, 0x101, 0xfffff046, 0x9, 0x400, 0xfffffffa, 0x5, 0x0, 0x6, 0x4, 0x7, 0x36, 0x157, 0x7d1, 0x8b96, 0xf, 0x20005, 0x0, 0x7, 0x6, 0x2, 0x8, 0x925, 0x4, 0x9, 0x7, 0xb, 0x5a17cff6, 0x0, 0xb6, 0x2, 0x3, 0x2, 0x7f, 0xffffff7f, 0x7, 0x10000, 0x3, 0x1c2a, 0x3ff, 0x0, 0x10, 0x7f, 0x6, 0x3, 0x14, 0x80, 0x7, 0x4, 0x2, 0x0, 0x2f6, 0x5, 0x9, 0xa7, 0x0, 0x9, 0xc, 0x40, 0x8000006, 0x200, 0x1, 0x2, 0x1, 0x401, 0xaa0, 0x2, 0x6, 0x9, 0x400, 0xe, 0x0, 0xfffeffff, 0x5, 0x7fffffff, 0x7ff6, 0x3, 0x1, 0x4, 0x7, 0x400, 0x0, 0x6, 0x6, 0x101, 0x2, 0x5, 0xfffffff8, 0x3, 0x7fff, 0x6d, 0x7, 0x1, 0x8, 0x6, 0x10001, 0x0, 0xffffffff, 0x8, 0xd, 0x2, 0x200, 0x7bd, 0xa2, 0x2, 0x7, 0x9, 0x6, 0x2, 0x4ec, 0x3, 0x401, 0x5, 0xb, 0x1, 0x948, 0x7, 0x8001, 0xff, 0x200, 0xb67, 0x6, 0x5b, 0x2, 0x1, 0x8, 0x6, 0x2, 0x2, 0x1, 0x10, 0x7f, 0xa07, 0xc0bf, 0x40, 0xa4f, 0x8, 0x8001, 0x8, 0x6, 0x10000, 0x1000, 0x8, 0x1, 0x6, 0xab5, 0x4, 0x9da, 0x800000, 0x7, 0x4, 0xf8, 0x7, 0x7fffffff, 0xfffeffff, 0x401, 0x1, 0x101, 0x2, 0x3, 0xe, 0x6, 0x9, 0x401, 0x7, 0x0, 0x7, 0xfffffffc, 0x5, 0x4, 0x8, 0x3f39, 0xbaa, 0x2, 0x6, 0xcb7, 0x4, 0x8, 0x7f, 0x53b, 0xc, 0x1, 0x2, 0x8, 0xc, 0xfffffff8, 0x0, 0x2, 0x3, 0x5, 0x3, 0x400, 0x6b, 0x7ae, 0x1, 0x6f0, 0xffff, 0x7, 0x9, 0x4, 0xfff, 0x2, 0x7f, 0x3, 0x6, 0x544040be, 0x2, 0xc, 0x8, 0x9, 0x8, 0x7, 0x10001, 0xff, 0x7, 0x10000, 0x2, 0x818, 0x4, 0x3, 0x5af, 0x2, 0x5, 0x7, 0x2, 0xd, 0x2, 0x8d, 0xb8c5, 0xfffffffe, 0x202, 0x3, 0x2, 0xa0, 0x9, 0x7, 0x1, 0x4000000, 0xffffffff, 0x4, 0x40, 0x0, 0x1, 0x7, 0x6, 0x4, 0x8, 0x5, 0x6, 0x8, 0x8, 0x1, 0x5, 0x3, 0x9, 0xb1, 0x5, 0x7, 0xe, 0x9, 0x100, 0x3, 0x5, 0x6, 0x7, 0x2, 0x3, 0xec, 0x5, 0x7, 0xff, 0x5, 0x0, 0x9cf, 0xaef8, 0xffff, 0x5, 0x1, 0x5, 0xc, 0x18a, 0xc, 0x0, 0x0, 0x6, 0x7, 0x4, 0xf2ed, 0x6, 0x4, 0x1, 0x7, 0x5, 0x8, 0x10000, 0xb, 0x9, 0xec852fda, 0x2, 0x9, 0x2, 0x3620, 0x9, 0x3, 0x3, 0x7, 0x74, 0x0, 0x9, 0x0, 0x2, 0x7, 0x8, 0x3, 0x5, 0x21000000, 0x4, 0x5, 0x9, 0x356d28dc, 0x8, 0x999, 0x6, 0x24, 0x6, 0x3, 0x2772, 0x4, 0x1, 0x8, 0xffff, 0x8, 0x6, 0x0, 0x8001, 0x2, 0x2, 0x101, 0x9cf, 0x10001, 0xd1, 0x0, 0x5, 0x3, 0x6, 0x40004, 0x80000001, 0x2, 0x5, 0x9, 0xe, 0xfff, 0x7, 0x10000, 0xffff, 0x7, 0x9, 0xfffffff7, 0x6, 0xa8, 0x9, 0x7ff, 0xd8a, 0x5, 0x929, 0x0, 0x8, 0xfffffffe, 0x40, 0x4, 0x2, 0x6, 0x1, 0x7, 0x7, 0x7fffffff, 0x33, 0x5, 0xa7, 0x7d8e, 0x2, 0x5, 0x4, 0x5, 0x3, 0x4, 0x1, 0x5, 0x96, 0x80, 0x8000, 0x0, 0x7, 0xfffffffc, 0x3, 0x3, 0x5, 0x0, 0x4, 0x100000, 0x6, 0x1, 0x9, 0x2, 0x4, 0x5, 0x3ff, 0x9, 0x6, 0x4, 0x5, 0x40, 0x800, 0xfffffffb, 0x5, 0x0, 0x0, 0x80, 0x6, 0x10, 0x0, 0x0, 0x3, 0x4, 0x4, 0x80000001, 0x81, 0x1, 0x0, 0x6, 0x2, 0x7, 0xff, 0x7fff, 0x7, 0x0, 0x3, 0x1, 0x3, 0xb, 0x3, 0x6c, 0xffffffff, 0x8, 0x1ff, 0x10, 0xf, 0x81, 0x292e, 0x2ac9, 0x9, 0xb42, 0x7, 0xd015, 0x3, 0xff, 0x8001, 0x6, 0x0, 0xe, 0x5, 0xfffffffb, 0x6, 0x0, 0x9, 0x5, 0x80000000, 0x6, 0xfffffffb, 0x8, 0x6, 0x3, 0xd, 0x8001, 0x100, 0xffffffa1, 0xb, 0x1, 0x25fa, 0xd4, 0x2, 0xffffffd6, 0x976, 0x7, 0x4, 0x0, 0x5, 0xff, 0x3, 0xe6, 0x74c, 0x4, 0x7, 0xb0a, 0x6, 0x862d, 0x40, 0xffffffff, 0x5, 0x5, 0xd8c, 0x9, 0x7fffffff, 0x7, 0xe11, 0x4, 0x8, 0x1ff, 0x6, 0x10, 0x8001, 0x0, 0x8, 0xffffffff, 0x40, 0xe8, 0xb, 0x2, 0x9, 0x8, 0x5, 0x5, 0x80000001, 0xe, 0x4, 0x9, 0xb, 0x1, 0x3, 0x9, 0x9, 0xa0000000, 0xc390, 0x4, 0x791, 0xfff, 0x4, 0x54f, 0x4, 0x4, 0x80, 0x6, 0xfffffe00, 0xb, 0x5, 0x4, 0x7, 0x401, 0x4, 0x2, 0x8, 0x2, 0x3, 0xfffffff7, 0x9, 0x5, 0x6, 0x6, 0x4, 0x8, 0x0, 0x6f616b2e, 0x8, 0x101, 0x1ff, 0x2, 0x0, 0x4, 0xa25, 0x7, 0x8001, 0x9, 0xdd4, 0x4, 0x9, 0x7ff, 0x9, 0xffffffff, 0x80, 0x1, 0x4, 0x7, 0xfffffff7, 0x8, 0x2f69, 0x1, 0x7, 0x766b, 0x8, 0x1, 0xb, 0x8, 0xffffce7d, 0x6, 0x2, 0xffff349c, 0x9c1, 0x2, 0x1, 0x1, 0x2, 0x52, 0x9, 0x10000, 0x5, 0x4, 0x35, 0x9, 0x9088, 0xfff, 0x8, 0xb, 0x8000, 0x7, 0x80000001, 0x8, 0x800, 0x6, 0x5, 0x6, 0xd1, 0x8, 0x8000, 0x3, 0x6, 0x4, 0x5, 0x10000, 0x5, 0x7fff, 0xff, 0x607, 0x6, 0x3, 0x4, 0x7, 0x8, 0xc0000000, 0x9, 0xf035, 0x5aa8, 0x1, 0x7, 0x3, 0x3, 0x5, 0x5, 0x2, 0x20, 0x101, 0x6, 0xb, 0x5fa5, 0x8, 0x5, 0xfffffffd, 0x7fffffff, 0x4, 0x5, 0x8, 0x1000, 0x3, 0xd, 0x3, 0x9, 0x2, 0x9a5, 0x8, 0x8, 0xff, 0x7, 0x4, 0x7fffffff, 0x4b8, 0x3, 0x5, 0x2, 0x4, 0x6, 0x40, 0x1, 0xe07, 0x8, 0x340, 0x3, 0x5, 0x1, 0x7, 0xfb3f, 0x100000, 0x3, 0x9, 0x4, 0xa, 0x100, 0x1a, 0xfffffffa, 0x7, 0x39, 0x7ff, 0xe, 0x835, 0x7, 0x1, 0x2b, 0x2, 0x1d1c, 0x10, 0x6, 0x10000, 0x7, 0x7f, 0x4, 0x5, 0x5, 0x2, 0x4, 0xffffff00, 0xee5b, 0x1, 0x1, 0x0, 0x8, 0xfffffffc, 0x29f0, 0x6, 0x8, 0x7, 0x769, 0x0, 0x4, 0xe6f, 0x3, 0xf2a, 0x6, 0x93ad, 0x5, 0x9, 0x400, 0x8000, 0x7, 0x6, 0x5, 0x80000001, 0x4, 0x9, 0x1, 0xf4, 0x100, 0x7, 0x1, 0x400, 0x401, 0x4, 0x3, 0xb, 0x7, 0x10, 0x2, 0x2, 0x7f, 0x5, 0x7f, 0x54bf, 0x10, 0xd, 0x8, 0xff, 0x73a3, 0xdc, 0x3, 0x9, 0x3, 0x3b, 0x400000, 0x4, 0x2, 0xfaea, 0x3, 0x80000001, 0x6, 0x7, 0x4, 0x4b, 0x8, 0x6, 0x2, 0xffff, 0x8, 0x8, 0x2, 0xb, 0x9, 0x7fffffff, 0x80, 0x0, 0x1, 0x2, 0x9, 0x5b40000, 0x32bb, 0x200, 0x8, 0xffffffff, 0xf3d, 0x8a, 0x4, 0x3, 0x5, 0x5, 0x81, 0x5, 0xef, 0x6, 0x6, 0xac, 0x7, 0x4, 0x64, 0x6, 0x9, 0x8, 0x3, 0x300000, 0x3, 0x0, 0x4a1, 0xcd9, 0x3e77, 0x854, 0xee8, 0x3, 0x7fffffff, 0x400, 0x5, 0x3, 0x4, 0x2, 0x2, 0x81c, 0x3ff, 0x800, 0xe7d, 0x40, 0x1ff, 0x0, 0x4, 0x3, 0x400, 0xfffffffe, 0xffffffff, 0x800, 0x41c, 0x9, 0xfffffffc, 0x800009, 0x1bcb, 0x9, 0x4, 0x2, 0xf4a, 0x8, 0x1ff, 0x3, 0x401, 0x3, 0x9, 0x7, 0x2b4, 0x91, 0x7, 0x8c, 0x1, 0xffffffff, 0x2, 0xb, 0x9, 0x7, 0x3, 0x0, 0x9, 0xb, 0x3, 0x1f, 0x8, 0x9, 0x0, 0x4, 0x0, 0x7, 0x8, 0xd3, 0x5, 0xf, 0x3, 0x8, 0x7, 0x3, 0x7ff, 0x104, 0x6, 0x5, 0x2, 0x7, 0x8, 0x6ee5, 0xfffffffb, 0x401, 0x7, 0x7fffffff, 0x1, 0x0, 0x1, 0x5, 0xc0000000, 0x1, 0x2, 0x76ac8333, 0xe, 0xff, 0x3ff, 0x66680, 0x7ff, 0x9, 0x9, 0x2, 0x230c, 0x2, 0x51c4ea0d, 0xbd, 0x9c, 0xd, 0x401, 0x0, 0x0, 0x3, 0xe6, 0x2, 0x4], 0x2, 0x400, 0x38})
syz_usb_connect(0x0, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)

10m56.086328424s ago: executing program 0 (id=1204):
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffb, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c)
r3 = dup2(r2, r2)
sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r5, 0x0, 0xd0, &(0x7f0000000000), 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2e, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x64000600)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000002c0)=ANY=[], 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

10m43.847338515s ago: executing program 33 (id=1188):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1258c3, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@delchain={0x126c, 0x65, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x6, 0x10}, {0x4, 0xffff}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x80}}, @filter_kind_options=@f_flow={{0x9}, {0x43c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3d9, 0x9, 0x0, 0x4, 0x3, 0xca51, 0x1, 0x4800000, 0x3, 0xe, 0x6, 0x9, 0x7fffffff, 0x0, 0xfffffffa, 0x2, 0x5, 0xc, 0x81, 0x7, 0x3ff, 0x9, 0x7, 0xbb, 0xffffffff, 0xe18, 0x7, 0x5, 0x4ee, 0x8, 0x4, 0xe, 0xc, 0x11, 0x5, 0x3, 0x9, 0x1, 0xfffffffb, 0x3, 0x4, 0x62, 0x6, 0x4, 0x0, 0x40, 0x74, 0x628d240c, 0x0, 0x7, 0x10001, 0x4, 0x1, 0x7f, 0x8, 0xf38e, 0x5, 0x5, 0xfffffbff, 0x9, 0x1111, 0x0, 0x5, 0x8, 0x0, 0x3, 0xfffffffe, 0x40, 0x8, 0x13, 0x7fff, 0x1, 0x5, 0x7, 0x8, 0x10000, 0xfffffffb, 0x6, 0x7, 0x5, 0x7, 0x40, 0xb00b, 0xa, 0x6, 0x81, 0x30000000, 0x5d4, 0x1, 0xca3d, 0x8, 0x9, 0xc, 0x83, 0x7, 0x0, 0x6, 0x5, 0x0, 0xf, 0xec8, 0x8, 0xec, 0x1, 0xf36, 0x64a8, 0x4, 0x8, 0x91a0, 0x7, 0x8, 0x101, 0xa8, 0x6, 0x55, 0xfffffff8, 0xffffffe5, 0x5, 0xfffffffa, 0x5b, 0x8, 0xb0fd, 0x0, 0x0, 0xb, 0x8, 0x8f5, 0x80000001, 0xfffffe00, 0x778, 0x37, 0x7, 0x0, 0x24, 0xfffffff7, 0x3, 0x5, 0x7f, 0x2e, 0x4, 0x597, 0x8001, 0x5, 0x3, 0x6c40, 0xd, 0xfffffff9, 0x9, 0x7, 0x8000, 0x7, 0xffff, 0xfffffffd, 0x5, 0x75, 0x7b6, 0x5, 0x4a8c, 0x5, 0x0, 0x3436, 0x68, 0x9e3, 0x401, 0x5b17, 0x4, 0x9, 0x5, 0x7, 0x2, 0xc23, 0x6, 0x6, 0x3, 0x0, 0x400000, 0xfffff91a, 0xa, 0x81, 0x5, 0x40, 0x7, 0x5, 0x4, 0x8000, 0x10001, 0xf, 0x3, 0xd, 0x1ff, 0x7, 0xf, 0x4, 0x2, 0x6, 0x3, 0x0, 0x93, 0x4, 0x1, 0x0, 0x8, 0x84, 0x1, 0x5, 0x9, 0x0, 0x9, 0x7, 0x3, 0x3, 0x3, 0x9, 0x3, 0x1d321dae, 0xffff, 0x8fb, 0x9, 0x80000000, 0x6, 0x2, 0xb4a, 0x4, 0x40, 0x5, 0x6, 0x2, 0x0, 0x6, 0xb99, 0x8, 0x2, 0x6, 0x9, 0xa, 0xc789, 0x7, 0x7, 0x5, 0x4, 0xd5, 0x81, 0x9, 0x200, 0x4, 0xc9, 0x3, 0xe, 0x7fff, 0x8, 0x5, 0x80000000, 0x7, 0x6, 0x3, 0x800]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x7e9936fe}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1069c}, @TCA_FLOW_KEYS={0x8, 0x1, 0xed56}, @TCA_FLOW_KEYS={0x8, 0x1, 0xc4c2}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}, @filter_kind_options=@f_route={{0xa}, {0xdec, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0xd}}, @TCA_ROUTE4_ACT={0x164, 0x6, [@m_ct={0x94, 0x12, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "21ae94e00a0ee75a5851ee25d6c7d1cd"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_LABELS={0x14, 0x7, "d82944497361bf56a255f3ce2e39779d"}, @TCA_CT_LABELS={0x14, 0x7, "be58d599b717877069e10e308645d5dd"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0xcc, 0x1f, 0x0, 0x0, {{0x9}, {0x84, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x24f, 0x0, 0x1, 0xfb57}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x448f, 0x80000000, 0x5, 0x6}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x4, 0x10000000, 0x6}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0xff, 0xfffffffffffffffc, 0x7, 0x10001}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x1f, 0x6, "16bbc0c78d5de4b00baea64403f763160ec28f8bb23b3c0c2391d6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x860, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x60}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fffffff, 0xc11, 0x80000000, 0x7, 0x7f, 0xd10, 0x80000000, 0x200, 0x3, 0xffffff3e, 0x6, 0xe, 0xfffffffc, 0x4570, 0x711, 0x1ff, 0x0, 0x4, 0x7, 0x8f09, 0x1, 0xfffffff7, 0x3, 0x5d3, 0x3f2, 0x1, 0xffff7321, 0x8000, 0x8, 0x2, 0x1000, 0x10000, 0x5, 0xd, 0x7, 0x3228eecc, 0xe, 0x2, 0x8b35, 0x4, 0xffff8001, 0xc, 0xc2bd9000, 0x3, 0x0, 0x3, 0x10, 0xd79b, 0x6, 0x0, 0x100, 0x7fff, 0x4, 0x1, 0x0, 0x8, 0x7, 0x2, 0x1, 0x7, 0xffff8000, 0x4, 0x100, 0x1, 0x10000, 0x5, 0x3, 0x4, 0x46, 0x4, 0x7, 0xff, 0x5, 0x8001, 0x4, 0x8001, 0x5, 0x4, 0x3ff, 0x1, 0x7f, 0x5, 0x2, 0x3, 0xa, 0x25c8, 0x1, 0x0, 0x73, 0x1, 0x7, 0x4, 0x3, 0x10000, 0x80, 0xfff, 0x6, 0x3df6, 0x8, 0x6, 0x91, 0x7, 0xe75c, 0x4, 0xaf10, 0xb, 0x6, 0x2, 0x7, 0x10000, 0x7fffffff, 0x4, 0x10001, 0x2, 0xa7b1, 0xfff, 0x8, 0x0, 0xfffffff9, 0x7c0e, 0x9d, 0x42e, 0x0, 0xd0, 0xa, 0x2, 0x501, 0x8000000, 0xfff, 0x10, 0x0, 0x4, 0xffff, 0x7, 0x8, 0x800, 0x90, 0x9, 0xfffff001, 0x3, 0x5, 0x7, 0xc, 0x0, 0xa, 0x1, 0x5f, 0x3, 0x7, 0x7, 0x2, 0x2, 0x3, 0x2, 0x4, 0x2455, 0x6, 0x2, 0xab, 0x7fffffff, 0x3, 0x8, 0x3, 0x200, 0x6d, 0xd361, 0x2, 0x1000, 0x7, 0x7, 0x9, 0x2, 0x4, 0x8, 0x2, 0xfffffff7, 0x3, 0xf4fb, 0xffffffff, 0xe90374a, 0x0, 0x8, 0x3, 0x5, 0x5, 0x0, 0x0, 0x1, 0x2, 0x10001, 0x5, 0x2, 0x0, 0x90, 0x5, 0x7f, 0x9, 0x12, 0x7, 0x5, 0x5, 0x3, 0x4, 0x36b9, 0x200, 0x7, 0x4, 0x7651000, 0x1, 0x4, 0x7, 0x5, 0x6, 0x6, 0x6, 0x0, 0x9, 0x8, 0x809, 0x1, 0x1, 0x0, 0x209, 0x2, 0x2, 0x6, 0x1, 0x80000000, 0x54, 0x2, 0xc85, 0x1ff, 0x0, 0xfffff801, 0x413, 0x800, 0x1, 0x950, 0x2, 0x5, 0x6, 0x800, 0xfff, 0x4, 0x5, 0x10, 0x10001, 0xd, 0x3, 0x8, 0x401, 0xffffffff, 0x7f, 0x4a, 0x10001, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0xb8ce, 0x7, 0x80000000, {0xd, 0x2, 0x0, 0x3, 0x9, 0x2}, {0x6, 0x2, 0x5, 0xa, 0x2, 0x7}, 0x10, 0xed, 0x7fff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0x4, 0x3ff, 0x0, 0x9, 0x80000000, 0x3, 0x12, 0x6, 0x38, 0x3, 0x1, 0x7, 0x1000, 0x1, 0x4, 0x3, 0x9bc, 0x200, 0x7, 0x5, 0x200, 0x1, 0x0, 0x2, 0x1, 0xe, 0x3, 0x2, 0x8, 0x3, 0x1, 0x4, 0x80000001, 0x4, 0x0, 0x70fc, 0x8, 0x19, 0x1c, 0xe, 0x4, 0x7, 0x4, 0x1, 0x0, 0x4, 0x36, 0x4, 0x8001, 0x9f, 0xfff, 0x5, 0xfffffff9, 0x100000, 0x400, 0x0, 0x83a, 0x26, 0xe02, 0xe566, 0x8a9, 0xff, 0x2, 0x0, 0x1ff, 0x5, 0x9, 0x5, 0x51d0, 0x81, 0xfffffff9, 0x9b, 0x3, 0x0, 0xffffffff, 0xe13, 0x4f, 0x2, 0xa, 0x7, 0x9, 0x1, 0x189f, 0x0, 0x6ac, 0x3, 0x9, 0xf, 0x7, 0x400, 0x9, 0x3, 0x8, 0x5, 0x3, 0x724, 0x3, 0x2, 0xff, 0x0, 0x2, 0x800, 0x0, 0x400, 0x6, 0xd, 0x8000, 0x5, 0x0, 0x1, 0x6, 0x81, 0x9, 0x6, 0x80000000, 0x8, 0x0, 0x4, 0x61d6, 0x7, 0xf0, 0xfffffffc, 0x90a8, 0x610, 0x8, 0x9, 0x0, 0x1, 0xd100, 0x6, 0x2, 0x6, 0x40, 0x739, 0x7f, 0xe, 0x1230, 0x5, 0x4, 0x0, 0x0, 0x2, 0x7, 0xe482d32c, 0x1ff, 0x3, 0x5, 0x4, 0x8, 0x5, 0x857, 0x6, 0x4, 0x3, 0x6, 0xfffffffc, 0x2, 0x8001, 0x0, 0x7, 0x8000, 0xb, 0x0, 0x4, 0x101, 0x8, 0x10000, 0xffff, 0x10001, 0xa, 0x8, 0xb18d, 0x1, 0x4, 0x1000, 0x6, 0x4f366a1d, 0x8, 0x2, 0x7, 0x8, 0x2, 0xf, 0x100, 0x7, 0xe, 0x7, 0xfff, 0xaa2f, 0x9, 0x3ff, 0x73b, 0x0, 0x8, 0x3, 0x80000001, 0xfff, 0x5, 0x6, 0x7f, 0x1fe, 0x1000000, 0xffffffff, 0x6, 0x81, 0x1, 0x1, 0x4, 0x3, 0x8, 0x6235, 0x2, 0x4, 0x0, 0x6, 0x8001, 0x23, 0xc, 0x5, 0xe6f, 0x2, 0x6, 0x0, 0x3, 0x3808525f, 0x8, 0x3, 0x4, 0xfffffff8, 0x6, 0x47b, 0x7fffffff, 0xffff8001, 0x2, 0x2, 0x9d, 0xe, 0x7fff, 0x5, 0x7, 0x3, 0x7, 0x1, 0x4, 0x2, 0xe0e6, 0x4, 0x6, 0x2, 0x1, 0x3, 0x3, 0x3, 0xb]}]}, @TCA_ROUTE4_POLICE={0x41c, 0x5, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xb7, 0x3, 0x470, 0x101, 0x4, 0x7, 0x184a, 0x4, 0x1, 0x80000000, 0x8, 0x1, 0x9, 0x1, 0x31, 0x2, 0x9, 0x6, 0xffffffff, 0x5, 0x800, 0x2, 0x40, 0xf79, 0x3ff, 0x3, 0xffffffff, 0xfffffff8, 0x1, 0x6b68, 0x0, 0x3, 0x1, 0x5, 0x1, 0x800, 0x2, 0x4, 0x0, 0x6, 0x1, 0xfffffffd, 0xad3, 0x5, 0x6, 0x1, 0x5, 0x30000000, 0x0, 0x7, 0x81, 0x9, 0x9, 0x8, 0x2, 0x0, 0x4, 0x9, 0x80000000, 0x7f, 0x8, 0x10, 0xd, 0x3, 0x406a, 0xc1, 0x6, 0x955, 0x7fff, 0x8, 0x4bc3, 0xffff, 0x46f1, 0x9, 0x6, 0x6, 0x4, 0x5, 0x8, 0x6, 0x8, 0xaa8, 0x100, 0x1, 0xb91, 0x10001, 0x8, 0x2, 0x13, 0x0, 0x7, 0xa7f7, 0x5, 0x1, 0x4, 0x5, 0x3, 0x401, 0x3e20, 0x5, 0x3, 0x1, 0xe0f, 0x0, 0x1, 0x7, 0x9, 0x5, 0x25dd, 0x8, 0x100, 0x7, 0x1, 0x6, 0x8, 0xc, 0xf4, 0x2, 0x2, 0x0, 0x8, 0x7, 0x6, 0x7, 0x2, 0x8, 0x9, 0x8, 0x6c, 0x6, 0x10001, 0xb, 0x4, 0x3, 0xf, 0x7, 0x37000000, 0xffffff62, 0x10001, 0x7, 0x5, 0x4, 0x3730e0dc, 0x10000, 0x8, 0x8, 0x4, 0x7, 0x6, 0x128e, 0x10000, 0x0, 0x4, 0x7, 0xe, 0x2, 0x10, 0xffffffff, 0x1, 0x6, 0x8, 0xffffffff, 0x9, 0x2, 0x9, 0xe4ee, 0x6a, 0xffffffff, 0x2, 0xa6e, 0x9, 0x10, 0x151d, 0x259, 0x5, 0x4, 0x0, 0x2, 0x1, 0x401, 0x9, 0x6, 0x9, 0x7fff, 0x480f, 0x6, 0x3de, 0x5, 0x0, 0x401, 0x7f, 0x7, 0x2, 0xff, 0xfffffff7, 0x3, 0x40, 0x6, 0x800, 0x2, 0xd9, 0xaf8, 0x0, 0x400, 0x0, 0x9, 0x5, 0x7, 0x4, 0x9, 0x9, 0x3, 0x0, 0x9, 0xfffffff0, 0x0, 0x0, 0x5, 0xf41, 0x5, 0x2, 0xa4, 0x9, 0x8, 0x6964417a, 0x4, 0x4, 0x1, 0x9, 0xfffffff9, 0x23, 0x1, 0x2, 0x3, 0x43e2ba51, 0x1, 0xf, 0x5, 0x2, 0xffffffff, 0x7, 0xfffffff7, 0x3, 0xf, 0x2, 0xfffffffa, 0xc, 0x5, 0x1, 0xb1c, 0x1, 0xfffffff7, 0x7, 0x2, 0x10001]}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0x126c}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0xfffffe61}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x5}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0x8, 0x1, 0xe, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xd, 0x3, 0x5, 0x6, 0x6, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r10, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, <r11=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r10, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r10, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_DQBUF(r10, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x3, 0x1, 0x4, 0x110000, 0x5, {0x77359400}, {0x3, 0x1, 0x0, 0x2, 0x0, 0x7, "75ff52b2"}, 0x6, 0x2, {0x0}, 0x3ff, 0x0, r11})
ioctl$vim2m_VIDIOC_QBUF(r10, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r11})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
unshare(0x66000080)
r12 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'})

10m41.005256568s ago: executing program 34 (id=1204):
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffb, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c)
r3 = dup2(r2, r2)
sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r5, 0x0, 0xd0, &(0x7f0000000000), 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2e, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x64000600)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000002c0)=ANY=[], 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

9m38.415262252s ago: executing program 7 (id=2328):
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x48008)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x16}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x2, 0x0, 0x6, 0xfffffffd}}, 0xe8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

9m38.285712177s ago: executing program 7 (id=2331):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090d, 0x2, '\x00', @p_u32=0x0}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000)
r4 = socket(0x22, 0x2, 0x2)
accept(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040))
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)
ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x3d, '\x00', @data=0xf, 0x9465}]})
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
fchmod(r8, 0x100)

9m37.99031945s ago: executing program 5 (id=2335):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='lp', 0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000400000004000000070000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18)
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000033c0)={0x18, 0x0, 0x0, {0x5}}, 0x23)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
pread64(r6, &(0x7f00000003c0)=""/128, 0x80, 0x9)

9m36.152119171s ago: executing program 5 (id=2343):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0])
mount$fuseblk(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x814802, &(0x7f0000000880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})

9m35.375229762s ago: executing program 5 (id=2352):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a090400000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8044)

9m34.964752316s ago: executing program 5 (id=2358):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

9m34.811612442s ago: executing program 5 (id=2360):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000440)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @empty, 0x1}, {0xa, 0x4e22, 0xfe, @remote, 0x3}, r1, 0x6}}, 0x48)

9m34.600477905s ago: executing program 5 (id=2363):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

9m34.12368026s ago: executing program 7 (id=2371):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x800)

9m33.872576717s ago: executing program 7 (id=2375):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0)

9m32.847983678s ago: executing program 7 (id=2395):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @empty, 0x1}, {0xa, 0x4e22, 0xfe, @remote, 0x3}, r1, 0x6}}, 0x48)

9m32.097971878s ago: executing program 7 (id=2403):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20040043}, 0x0)

9m19.557553257s ago: executing program 35 (id=2363):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

9m16.971622476s ago: executing program 36 (id=2403):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20040043}, 0x0)

2m31.437790817s ago: executing program 3 (id=6661):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x4, 0xf8}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee84400008f080000000019b0fb0bba", 0x41}, {&(0x7f0000000e80)="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", 0x150}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73", 0xc0}], 0x3}, 0x8011)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2008840)

2m30.734900618s ago: executing program 3 (id=6666):
syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xf, 0x5}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8044}, 0xc8c4)

2m29.903346836s ago: executing program 3 (id=6672):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = socket$isdn_base(0x22, 0x3, 0x0)
close(r2)
r3 = socket$kcm(0x29, 0x5, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
r5 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendfile(r3, r4, 0x0, 0xffffffff000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m28.030198994s ago: executing program 3 (id=6679):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x338)
r1 = socket(0x8000000010, 0x2, 0x0)
write(r1, 0x0, 0x0)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}})

2m26.784268914s ago: executing program 3 (id=6685):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

2m26.404823167s ago: executing program 3 (id=6688):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)

2m14.305864757s ago: executing program 9 (id=6772):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

2m14.176541677s ago: executing program 9 (id=6773):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m13.602459851s ago: executing program 9 (id=6776):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

2m13.258392333s ago: executing program 9 (id=6778):
bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="eaffffff80000000001a0000f72dab84c3f7cffa", @ANYRES32=0x1, @ANYBLOB="800800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14)
write$nci(r4, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r8 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)
socket$nl_route(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

2m12.768860772s ago: executing program 9 (id=6779):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
listen(r0, 0xda90)
accept4(r0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dummy0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r1], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)

2m12.419446638s ago: executing program 9 (id=6781):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)

2m11.326385194s ago: executing program 37 (id=6688):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)

1m57.221987855s ago: executing program 38 (id=6781):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)

17.684896484s ago: executing program 2 (id=7332):
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000500))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x5, 0xfffffffd)
r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00')
preadv(r4, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x96, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = socket$netlink(0x10, 0x3, 0x14)
dup(r5)
r6 = socket(0x8000000010, 0x2, 0x0)
write(r6, &(0x7f0000000540)="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", 0x191)

16.215903811s ago: executing program 2 (id=7334):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000708c981e31e5a34250000009111780000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480))
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x7800, 0x8011, 0x0, 0x4, {{0x12, 0x4, 0x3, 0x3, 0x48, 0x65, 0x0, 0x2, 0x2f, 0x0, @local, @remote, {[@generic={0x82, 0xb, "d7f4a0dd4a9e52d817"}, @generic={0x89, 0xd, "5dba757ddbafde62535436"}, @timestamp_addr={0x44, 0x1c, 0x78, 0x1, 0xb, [{@multicast2, 0x3}, {@multicast1, 0x1}, {@loopback, 0x1}]}]}}}}})
socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r3 = socket(0x8, 0x4, 0x3)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000700)={{}, 0x0, 0x1c, @inherit={0x70, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000001000000000000003400000000000000080000000010000005000000000000000200000000000000280000000000000008000000000000000000000000000002050000000000000000000040020000000000000000000000a545c6b11d1afa8a448a6b3c1702e7032c12c63369ccf3f937ae0b56d40457d5750b28"]}, @name="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"})
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000bc0)={<r4=>0x0, "224d9d72f888cdef7b35aa37eeeda778"})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001bc0)={{r0}, 0x0, 0x4, @unused=[0x10, 0x401, 0x2, 0x8], @devid=r4})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x618e, &(0x7f0000000b40)={{r2, 0x0, 0x121041, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0})

11.082379622s ago: executing program 6 (id=7351):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8b, 0x6}}, @qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x3}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)

9.63626345s ago: executing program 4 (id=7354):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10001, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'bridge0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$write2(0x11, 0x0, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
ioctl$RTC_AIE_ON(r2, 0x7001)

6.297496564s ago: executing program 1 (id=7356):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000001c0)=""/90, 0x5a}, {&(0x7f0000000f00)=""/217, 0xd9}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4104, 0x1008}, {&(0x7f0000000000)=""/80, 0x50}], 0x6}, 0x70001}, {{0x0, 0x0, 0x0}, 0x75}], 0x4, 0x102, 0x0)

5.710487793s ago: executing program 4 (id=7357):
syz_open_dev$usbfs(0x0, 0x76, 0x101b01)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000340), 0x0}, 0x20)
unlink(&(0x7f0000000140)='./cgroup\x00')
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xfffffffffffffff7, 0x7ff, 0x0, 0x0]}, 0x20)
syz_open_procfs(0x0, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000000)={0x5, 0x8d, 0x5})

5.571267999s ago: executing program 6 (id=7358):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$rds(0x15, 0x5, 0x0)
unshare(0x20000400)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000100)={@vsock={0x28, 0x0, 0x2710, @my=0x1}, {0x0}, 0x0}, 0xa0)

5.567493271s ago: executing program 8 (id=7359):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x102, 0x0)

4.374993765s ago: executing program 1 (id=7360):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a00000800", @ANYBLOB="0400"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

4.320065751s ago: executing program 6 (id=7361):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x5)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x18, r2, 0x1, 0x0, 0xfffffffe, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

4.288601301s ago: executing program 8 (id=7362):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.159152931s ago: executing program 4 (id=7363):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0xfdcd, &(0x7f0000000440)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x2, 0x9, 0x40}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000001b00)=[{{&(0x7f00000004c0)=@rc, 0x80, &(0x7f0000001a80)}, 0x9}], 0x1, 0x100, &(0x7f0000001b40))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4}, 0x20000000)
recvfrom(r5, 0x0, 0x0, 0x42, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
unshare(0x20000400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8bc, 0x10000}, 0x28)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
gettid()
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)

4.043665932s ago: executing program 1 (id=7364):
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x42, 0x100405, 0x10})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x14, 0x1d, 0x21, 0x70bd27, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x22000044}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x11, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x5}, 0x0, 0x0})
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0)
timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x6, 0x3, 0x7, 0x4, 0x9], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

3.741886063s ago: executing program 6 (id=7365):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44000000100001080000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.524057499s ago: executing program 2 (id=7366):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.03121551s ago: executing program 4 (id=7367):
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x4000000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0xc008744c, 0x0)

2.933402837s ago: executing program 8 (id=7368):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x28, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

2.646910507s ago: executing program 8 (id=7369):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x40}}, 0x48010)
close(0x4)

2.331322629s ago: executing program 2 (id=7370):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'lo\x00'})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

2.305063053s ago: executing program 8 (id=7371):
r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r4, &(0x7f0000000340), 0x0}, 0x20)
unlink(&(0x7f0000000140)='./cgroup\x00')
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xfffffffffffffff7, 0x7ff, 0x0, 0x0]}, 0x20)
syz_open_procfs(0x0, 0x0)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000140)={0x6, "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"})
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x5, 0x8d, 0x5})

2.129775014s ago: executing program 6 (id=7372):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f00000001c0)=""/90, 0x5a}, {&(0x7f0000000f00)=""/217, 0xd9}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4104, 0x1008}, {&(0x7f0000000000)=""/80, 0x50}], 0x6}, 0x70001}, {{0x0, 0x0, 0x0}, 0x75}], 0x3, 0x102, 0x0)

1.882494269s ago: executing program 4 (id=7373):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b0187"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r0, r1, 0x2f, 0x18, 0x4}, 0x20)

720.525393ms ago: executing program 1 (id=7374):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a00000800", @ANYBLOB="0400"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

717.101632ms ago: executing program 8 (id=7375):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x5)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x18, r2, 0x1, 0x0, 0xfffffffe, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

554.611363ms ago: executing program 2 (id=7376):
syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc03", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xf, 0x5}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x8044}, 0xc8c4)

434.369501ms ago: executing program 1 (id=7377):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x4090)

219.755276ms ago: executing program 4 (id=7378):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x20005040)

218.295389ms ago: executing program 6 (id=7379):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf25020000000800", @ANYRES32=r3], 0x1c}}, 0x840)
write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='a\a#'], 0x26)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000041)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000)

72.081987ms ago: executing program 1 (id=7380):
r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r4, &(0x7f0000000340), 0x0}, 0x20)
unlink(&(0x7f0000000140)='./cgroup\x00')
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xfffffffffffffff7, 0x7ff, 0x0, 0x0]}, 0x20)
syz_open_procfs(0x0, 0x0)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000140)={0x6, "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"})
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x5, 0x8d, 0x5})

0s ago: executing program 2 (id=7381):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x40}}, 0x48010)
close(0x4)

kernel console output (not intermixed with test programs):

f length 0, skipping remainder of the config
[  642.367634][ T5908] usb 5-1: config 0 has no interfaces?
[  642.373668][ T5908] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  642.373701][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  642.373724][ T5908] usb 5-1: Product: syz
[  642.373739][ T5908] usb 5-1: Manufacturer: syz
[  642.485635][ T5908] usb 5-1: config 0 descriptor??
[  642.582107][   T56] veth1_macvtap: left promiscuous mode
[  642.610322][   T56] veth0_macvtap: left promiscuous mode
[  642.611063][T17585] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4710'.
[  642.611085][T17585] openvswitch: netlink: Flow key attr not present in new flow.
[  642.779354][ T5908] usb 5-1: USB disconnect, device number 9
[  642.803110][   T56] veth1_vlan: left promiscuous mode
[  642.803694][   T56] veth0_vlan: left promiscuous mode
[  643.390048][T17595] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.4713'.
[  643.479199][T17596] sctp: [Deprecated]: syz.4.4713 (pid 17596) Use of int in max_burst socket option.
[  643.479199][T17596] Use struct sctp_assoc_value instead
[  644.268607][   T56] team0 (unregistering): Port device team_slave_1 removed
[  644.337189][   T56] team0 (unregistering): Port device team_slave_0 removed
[  646.375152][  T821] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  646.453794][T17165] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  646.538803][  T821] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  646.538834][  T821] usb 10-1: config 0 has no interfaces?
[  646.542958][  T821] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  646.542993][  T821] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  646.543016][  T821] usb 10-1: Product: syz
[  646.543032][  T821] usb 10-1: Manufacturer: syz
[  646.605572][  T821] usb 10-1: config 0 descriptor??
[  647.045016][ T6082] usb 10-1: USB disconnect, device number 2
[  647.076081][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  647.088568][T17165] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  647.388309][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  647.389334][T17165] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  647.506546][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  647.507592][T17165] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  647.565674][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  647.861742][T17648] netlink: 120 bytes leftover after parsing attributes in process `syz.9.4726'.
[  647.861781][T17648] netlink: 'syz.9.4726': attribute type 1 has an invalid length.
[  647.861794][T17648] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4726'.
[  648.293628][T17165] 8021q: adding VLAN 0 to HW filter on device bond0
[  648.441254][T17165] 8021q: adding VLAN 0 to HW filter on device team0
[  648.487301][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.487465][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  648.532719][ T7356] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.532875][ T7356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  650.372794][T17670] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4733'.
[  650.601439][T17165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  650.901004][T17165] veth0_vlan: entered promiscuous mode
[  650.948258][T17165] veth1_vlan: entered promiscuous mode
[  651.201043][T17165] veth0_macvtap: entered promiscuous mode
[  651.241134][T17165] veth1_macvtap: entered promiscuous mode
[  651.365445][T17165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  651.424157][T17165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  651.459153][   T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  651.521328][   T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  651.521817][   T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  651.524595][   T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  652.561998][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  652.562022][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.037024][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.037048][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.386345][ T5840] Bluetooth: hci2: command 0x0406 tx timeout
[  657.392889][ T5983] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  657.476958][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  657.594722][ T5983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  657.594751][ T5983] usb 5-1: config 0 has no interfaces?
[  657.601901][ T5983] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  657.601935][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  657.601973][ T5983] usb 5-1: Product: syz
[  657.601989][ T5983] usb 5-1: Manufacturer: syz
[  657.826814][ T5983] usb 5-1: config 0 descriptor??
[  658.268557][ T5983] usb 5-1: USB disconnect, device number 10
[  658.358365][ T5842] Bluetooth: hci4: command tx timeout
[  658.853118][T17762] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4757'.
[  660.566456][T17771] syz.3.4761 (17771) used greatest stack depth: 17368 bytes left
[  662.991556][T17828] netlink: 'syz.6.4785': attribute type 1 has an invalid length.
[  663.093697][T17828] 8021q: adding VLAN 0 to HW filter on device bond1
[  664.051538][T17833] bond1 (unregistering): Released all slaves
[  664.309371][T17847] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.735039][T17904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4819'.
[  667.673345][T17925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4828'.
[  667.728807][T17930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4828'.
[  668.429862][T17955] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20002
[  671.737906][T18005] netlink: 'syz.6.4858': attribute type 1 has an invalid length.
[  671.785189][T18005] 8021q: adding VLAN 0 to HW filter on device bond1
[  673.180462][T18005] bond1 (unregistering): Released all slaves
[  681.646640][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4908'.
[  681.646670][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4908'.
[  683.329374][T18173] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20002
[  684.898786][T18217] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20002
[  685.125825][T18227] netlink: 'syz.3.4945': attribute type 1 has an invalid length.
[  685.174210][T18227] 8021q: adding VLAN 0 to HW filter on device bond1
[  685.559815][T18227] bond1: (slave macvlan1): making interface the new active one
[  685.581516][T18227] bond1: (slave macvlan1): Enslaving as an active interface with an up link
[  685.786378][T18241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  686.052988][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  686.053066][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  691.732348][T18336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  691.885418][T18339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4991'.
[  691.885460][T18344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4991'.
[  692.341575][T18352] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4995'.
[  692.400526][T18354] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4995'.
[  694.544544][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5005'.
[  694.571803][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5005'.
[  695.021310][T18397] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5015'.
[  695.162565][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5016'.
[  695.174817][T18397] ipvlan1: entered allmulticast mode
[  695.174839][T18397] syz_tun: entered allmulticast mode
[  695.829446][T18416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5023'.
[  695.847996][T18416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5023'.
[  696.365133][ T8419] IPVS: starting estimator thread 0...
[  696.644962][T18432] IPVS: using max 10 ests per chain, 24000 per kthread
[  700.453930][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5064'.
[  700.478503][T18523] netlink: 27 bytes leftover after parsing attributes in process `syz.6.5064'.
[  702.470811][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5078'.
[  702.474441][T18556] netlink: 27 bytes leftover after parsing attributes in process `syz.8.5078'.
[  703.464816][ T5842] Bluetooth: hci3: command 0x0406 tx timeout
[  704.050494][T18607] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5103'.
[  704.052907][T18607] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5103'.
[  707.503542][T18707] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5144'.
[  707.528476][T18707] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5144'.
[  708.683576][   T37] audit: type=1800 audit(1777011399.155:2): pid=18742 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.5159" name="blkio.bfq.time_recursive" dev="tmpfs" ino=660 res=0 errno=0
[  709.204434][T18757] team_slave_0: entered promiscuous mode
[  709.204517][T18757] team_slave_1: entered promiscuous mode
[  709.280267][T18757] vlan2: entered promiscuous mode
[  709.280302][T18757] team0: entered promiscuous mode
[  710.030572][T18776] syzkaller0: entered promiscuous mode
[  710.030602][T18776] syzkaller0: entered allmulticast mode
[  710.169743][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5176'.
[  710.249796][T18792] netlink: 'syz.8.5177': attribute type 9 has an invalid length.
[  710.249823][T18792] netlink: 7 bytes leftover after parsing attributes in process `syz.8.5177'.
[  710.404128][T18789] gretap0: entered promiscuous mode
[  710.462536][T18789] macvtap1: entered promiscuous mode
[  710.462740][T18789] macvtap1: entered allmulticast mode
[  710.462759][T18789] gretap0: entered allmulticast mode
[  710.851397][T18804] netlink: 'syz.6.5182': attribute type 8 has an invalid length.
[  710.851422][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5182'.
[  710.971853][T18810] netlink: 176 bytes leftover after parsing attributes in process `syz.6.5182'.
[  711.011085][T18804] veth1_to_team: entered promiscuous mode
[  711.022352][T18804] gretap0: entered promiscuous mode
[  711.031258][T18804] batadv_slave_0: entered promiscuous mode
[  711.031518][T18804] batadv_slave_0: left promiscuous mode
[  711.122947][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5189'.
[  711.124189][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5189'.
[  711.210170][T18804] veth1_to_team: left promiscuous mode
[  711.249441][T18804] gretap0: left promiscuous mode
[  712.305689][  T821] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  712.388946][T18856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5204'.
[  712.457996][  T821] usb 10-1: Using ep0 maxpacket: 8
[  712.461615][  T821] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  712.461678][  T821] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  712.461701][  T821] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  712.461720][  T821] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  712.461738][  T821] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  712.461770][  T821] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  712.461788][  T821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.755856][  T821] usb 10-1: usb_control_msg returned -32
[  712.755907][  T821] usbtmc 10-1:16.0: can't read capabilities
[  712.982605][  T821] usb 10-1: USB disconnect, device number 3
[  713.004896][T18866] dummy0: entered promiscuous mode
[  713.064955][T18866] dummy0: left promiscuous mode
[  713.494171][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5216'.
[  713.507617][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5216'.
[  713.774619][T18890] netlink: 'syz.6.5220': attribute type 8 has an invalid length.
[  713.774813][T18890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5220'.
[  714.565840][T18890] veth1_to_team: entered promiscuous mode
[  714.587581][T18890] gretap0: entered promiscuous mode
[  714.592241][T18890] batadv_slave_0: entered promiscuous mode
[  714.592472][T18890] batadv_slave_0: left promiscuous mode
[  714.635930][T18890] veth1_to_team: left promiscuous mode
[  714.692504][T18890] gretap0: left promiscuous mode
[  714.783317][T18913] dummy0: entered promiscuous mode
[  714.828797][T18913] dummy0: left promiscuous mode
[  714.910867][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5237'.
[  714.965195][T18926] netlink: 27 bytes leftover after parsing attributes in process `syz.6.5237'.
[  715.254229][T18938] sock: sock_timestamping_bind_phc: sock not bind to device
[  715.317133][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5241'.
[  715.318050][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5241'.
[  719.387356][T19010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5268'.
[  719.392085][T19010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5268'.
[  719.529996][T19013] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5271'.
[  719.531844][T19013] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5271'.
[  720.919356][T19043] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5285'.
[  721.335446][T19043] gretap0: entered promiscuous mode
[  721.335831][T19043] macvtap1: entered promiscuous mode
[  721.338067][T19043] macvtap1: entered allmulticast mode
[  721.338087][T19043] gretap0: entered allmulticast mode
[  721.428502][T19042] team_slave_0: entered promiscuous mode
[  721.454487][T19042] team_slave_1: entered promiscuous mode
[  721.460666][T19042] vlan2: entered promiscuous mode
[  721.460689][T19042] team0: entered promiscuous mode
[  721.995251][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5296'.
[  722.003652][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5296'.
[  722.681785][T19094] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5304'.
[  722.787348][T19094] ip6gretap0: entered promiscuous mode
[  722.803348][T19094] macvtap2: entered promiscuous mode
[  722.803564][T19094] macvtap2: entered allmulticast mode
[  722.803580][T19094] ip6gretap0: entered allmulticast mode
[  722.810048][T19099] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5304'.
[  723.053229][T19099] ip6gretap0: left allmulticast mode
[  723.053541][T19099] ip6gretap0: left promiscuous mode
[  723.084861][T19100] tipc: Started in network mode
[  723.084894][T19100] tipc: Node identity 320c4e37ed1, cluster identity 4711
[  723.085076][T19100] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  723.085738][T19103] syzkaller0: entered promiscuous mode
[  723.085761][T19103] syzkaller0: entered allmulticast mode
[  723.252965][T19095] tipc: Resetting bearer <eth:syzkaller0>
[  723.308190][T19093] tipc: Resetting bearer <eth:syzkaller0>
[  723.889917][T19093] tipc: Disabling bearer <eth:syzkaller0>
[  725.036956][   T10] tipc: Node number set to 3743174199
[  725.306323][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5325'.
[  725.308873][T19152] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5325'.
[  728.421795][  T822] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  728.566276][  T822] usb 7-1: Using ep0 maxpacket: 8
[  728.568778][  T822] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  728.568838][  T822] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  728.568881][  T822] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  728.568910][  T822] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  728.568937][  T822] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  728.568982][  T822] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  728.569008][  T822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.958700][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5354'.
[  729.012786][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5354'.
[  729.048688][T19224] ip6gretap0: entered promiscuous mode
[  729.070770][  T822] usb 7-1: usb_control_msg returned -32
[  729.070827][  T822] usbtmc 7-1:16.0: can't read capabilities
[  729.123319][T19224] macvtap3: entered promiscuous mode
[  729.123515][T19224] macvtap3: entered allmulticast mode
[  729.123531][T19224] ip6gretap0: entered allmulticast mode
[  729.226224][T19226] ip6gretap0: left allmulticast mode
[  729.279536][  T822] usb 7-1: USB disconnect, device number 5
[  729.324569][T19226] ip6gretap0: left promiscuous mode
[  730.891584][T19274] capability: warning: `syz.3.5376' uses deprecated v2 capabilities in a way that may be insecure
[  731.090648][T19281] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5375'.
[  731.092718][T19278] binder: BINDER_SET_CONTEXT_MGR already set
[  731.092733][T19278] binder: 19272:19278 ioctl 4018620d 200000000040 returned -16
[  731.093226][T19278] binder: 19272:19278 ioctl c0306201 200000000240 returned -11
[  731.574794][   T36] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  731.747698][   T36] usb 4-1: Using ep0 maxpacket: 32
[  731.750099][   T36] usb 4-1: unable to get BOS descriptor or descriptor too short
[  731.751359][   T36] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  731.751414][   T36] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  731.753917][   T36] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  731.753945][   T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.753972][   T36] usb 4-1: Product: syz
[  731.753984][   T36] usb 4-1: Manufacturer: syz
[  731.753994][   T36] usb 4-1: SerialNumber: syz
[  732.205262][   T36] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  732.205321][   T36] usb 4-1: MIDIStreaming interface descriptor not found
[  732.547920][   T36] usb 4-1: USB disconnect, device number 5
[  732.847829][T19323] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  732.853523][T19323] syzkaller0: entered promiscuous mode
[  732.853553][T19323] syzkaller0: entered allmulticast mode
[  732.953065][T19323] tipc: Resetting bearer <eth:syzkaller0>
[  733.023991][T19322] tipc: Resetting bearer <eth:syzkaller0>
[  733.261594][T19322] tipc: Disabling bearer <eth:syzkaller0>
[  733.525739][T19344] udevd[19344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  733.561244][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  733.649960][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  733.649993][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  733.660781][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  733.660808][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  733.715348][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  733.715378][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  733.723048][T19350] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5404'.
[  733.972768][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  734.616100][T19343] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.663664][T19343] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.710708][T19343] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  735.729920][T19343] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  736.133790][T19343] __nla_validate_parse: 110 callbacks suppressed
[  736.133815][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  736.133838][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  736.241438][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  736.241470][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  736.251541][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  736.251569][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  736.416729][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  736.416759][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  736.511670][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  736.511702][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'.
[  737.285895][T19343] gretap0: left allmulticast mode
[  737.371361][T19370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  737.374379][T19372] syzkaller0: entered promiscuous mode
[  737.374408][T19372] syzkaller0: entered allmulticast mode
[  737.441703][T19383] tipc: Resetting bearer <eth:syzkaller0>
[  737.906570][ T2374] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  737.946713][T19364] tipc: Resetting bearer <eth:syzkaller0>
[  738.160764][T19364] tipc: Disabling bearer <eth:syzkaller0>
[  738.237996][T19505] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11
[  738.400958][T19483] macvtap4: entered promiscuous mode
[  738.400983][T19483] bond0: entered promiscuous mode
[  738.400999][T19483] bond_slave_0: entered promiscuous mode
[  738.401247][T19483] bond_slave_1: entered promiscuous mode
[  738.401623][T19483] macvtap4: entered allmulticast mode
[  738.401638][T19483] bond0: entered allmulticast mode
[  738.401651][T19483] bond_slave_0: entered allmulticast mode
[  738.401669][T19483] bond_slave_1: entered allmulticast mode
[  738.529217][T19483] 8021q: adding VLAN 0 to HW filter on device macvtap4
[  738.534423][ T2374] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  738.616554][ T2374] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  738.616611][ T2374] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  739.723655][T19524] vlan2: entered promiscuous mode
[  740.701459][T19567] bond0: entered promiscuous mode
[  740.701483][T19567] bond_slave_0: entered promiscuous mode
[  740.701730][T19567] bond_slave_1: entered promiscuous mode
[  740.742752][T19567] batadv_slave_0: entered promiscuous mode
[  740.756855][T19567] batadv_slave_0: left promiscuous mode
[  740.815020][T19567] bond0: left promiscuous mode
[  740.815047][T19567] bond_slave_0: left promiscuous mode
[  740.815310][T19567] bond_slave_1: left promiscuous mode
[  741.290464][T19572] bond0: entered promiscuous mode
[  741.290490][T19572] bond_slave_0: entered promiscuous mode
[  741.290768][T19572] bond_slave_1: entered promiscuous mode
[  741.300174][T19572] batadv_slave_0: entered promiscuous mode
[  741.300446][T19572] batadv_slave_0: left promiscuous mode
[  741.562721][T19572] bond0: left promiscuous mode
[  741.562741][T19572] bond_slave_0: left promiscuous mode
[  741.563025][T19572] bond_slave_1: left promiscuous mode
[  742.785164][T19613] __nla_validate_parse: 20 callbacks suppressed
[  742.785190][T19613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5516'.
[  742.843536][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5516'.
[  742.959269][T19613] bond_slave_0: entered promiscuous mode
[  742.959333][T19613] bond_slave_1: entered promiscuous mode
[  743.066480][   T37] audit: type=1800 audit(1777011433.595:3): pid=19577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.5494" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  743.066835][T19613] macvtap1: entered promiscuous mode
[  743.066856][T19613] bond0: entered promiscuous mode
[  743.067413][T19613] macvtap1: entered allmulticast mode
[  743.067441][T19613] bond0: entered allmulticast mode
[  743.067455][T19613] bond_slave_0: entered allmulticast mode
[  743.067473][T19613] bond_slave_1: entered allmulticast mode
[  743.131837][T19577] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  743.131896][T19577] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  743.131927][T19577] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  743.233498][T19613] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  743.380778][T19615] bond0: left allmulticast mode
[  743.380805][T19615] bond_slave_0: left allmulticast mode
[  743.380826][T19615] bond_slave_1: left allmulticast mode
[  743.380867][T19615] bond0: left promiscuous mode
[  743.381822][T19615] bond_slave_0: left promiscuous mode
[  743.381896][T19615] bond_slave_1: left promiscuous mode
[  744.142660][T19644] bond_slave_0: entered promiscuous mode
[  744.142709][T19644] bond_slave_1: entered promiscuous mode
[  744.217105][T19644] vlan2: entered promiscuous mode
[  744.217132][T19644] bond0: entered promiscuous mode
[  744.579641][T19667] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5538'.
[  744.681965][T19667] macvtap5: entered promiscuous mode
[  744.681990][T19667] syz_tun: entered promiscuous mode
[  744.683655][T19667] macvtap5: entered allmulticast mode
[  744.683675][T19667] syz_tun: entered allmulticast mode
[  745.178585][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5552'.
[  745.199950][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5552'.
[  747.485698][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  747.485762][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  748.338757][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5601'.
[  748.416741][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5601'.
[  748.442352][T19802] macvtap6: entered promiscuous mode
[  748.442375][T19802] erspan0: entered promiscuous mode
[  748.442581][T19802] macvtap6: entered allmulticast mode
[  748.442597][T19802] erspan0: entered allmulticast mode
[  748.685094][T19804] erspan0: left allmulticast mode
[  748.685127][T19804] erspan0: left promiscuous mode
[  748.948843][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5611'.
[  748.990333][T19828] macvtap7: entered promiscuous mode
[  748.990509][T19828] macvtap7: entered allmulticast mode
[  749.038785][T19833] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5611'.
[  749.042609][T19828] 8021q: adding VLAN 0 to HW filter on device macvtap7
[  749.547757][T19856] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5619'.
[  750.367092][T19878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5631'.
[  751.113738][T19912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  753.969875][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5679'.
[  754.128235][T20007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5682'.
[  754.325669][T20015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5688'.
[  754.354466][T20015] ip6gretap0: entered promiscuous mode
[  754.362486][T20015] macvtap1: entered promiscuous mode
[  754.362689][T20015] macvtap1: entered allmulticast mode
[  754.362704][T20015] ip6gretap0: entered allmulticast mode
[  754.648568][T20023] tipc: Started in network mode
[  754.648603][T20023] tipc: Node identity c6d3aa220db6, cluster identity 4711
[  754.648819][T20023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  754.978795][T20046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5698'.
[  755.017123][T20021] tipc: Disabling bearer <eth:syzkaller0>
[  755.521246][T20059] team_slave_0: entered promiscuous mode
[  755.521307][T20059] team_slave_1: entered promiscuous mode
[  755.543584][T20065] sock: sock_timestamping_bind_phc: sock not bind to device
[  755.570480][T20059] vlan2: entered promiscuous mode
[  755.570506][T20059] team0: entered promiscuous mode
[  759.178613][T20135] vlan2: entered promiscuous mode
[  759.802669][T20161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  761.200487][T20221] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  761.200526][T20221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  761.420496][T20223] dummy0: entered promiscuous mode
[  761.456755][T20223] dummy0: left promiscuous mode
[  762.946412][T20282] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5795'.
[  763.013438][T20286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5795'.
[  763.028181][T20282] macvtap8: entered promiscuous mode
[  763.028206][T20282] ip6gretap0: entered promiscuous mode
[  763.032941][T20282] macvtap8: entered allmulticast mode
[  763.032963][T20282] ip6gretap0: entered allmulticast mode
[  763.138412][T20286] ip6gretap0: left allmulticast mode
[  763.138444][T20286] ip6gretap0: left promiscuous mode
[  764.308818][T20336] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5821'.
[  764.933169][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5830'.
[  764.933193][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5830'.
[  764.933222][T20358] netlink: 'syz.3.5830': attribute type 11 has an invalid length.
[  764.990901][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5834'.
[  765.342271][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5830'.
[  765.342296][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5830'.
[  765.342322][T20358] netlink: 'syz.3.5830': attribute type 11 has an invalid length.
[  765.475328][T20365] macvtap9: entered promiscuous mode
[  765.475357][T20365] dummy0: entered promiscuous mode
[  765.477264][T20365] macvtap9: entered allmulticast mode
[  765.477290][T20365] dummy0: entered allmulticast mode
[  765.598773][T18017] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  765.622121][T18017] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  765.706402][T18017] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  765.758910][T18017] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  768.313061][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5872'.
[  768.313525][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5872'.
[  769.036453][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5891'.
[  769.036948][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5891'.
[  769.433565][ T5839] block nbd0: Receive control failed (result -32)
[  769.642958][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  769.703536][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  769.708124][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  769.718960][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  769.720232][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  770.577205][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5901'.
[  770.628330][T20532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5901'.
[  770.868091][T20536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5904'.
[  771.153651][T20532] ip6gretap0: left allmulticast mode
[  771.153859][T20532] ip6gretap0: left promiscuous mode
[  771.265810][T20536] macvtap2: entered promiscuous mode
[  771.266087][T20536] macvtap2: entered allmulticast mode
[  771.266105][T20536] team0: entered allmulticast mode
[  771.266119][T20536] team_slave_0: entered allmulticast mode
[  771.266138][T20536] team_slave_1: entered allmulticast mode
[  771.281001][T20536] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  771.865322][ T5839] Bluetooth: hci0: command tx timeout
[  772.633497][T18017] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.763054][T20560] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  772.763101][T20560] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  772.763124][T20560] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  773.544460][T20593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  773.931840][T18017] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.945107][ T5839] Bluetooth: hci0: command tx timeout
[  774.151958][T20502] chnl_net:caif_netlink_parms(): no params data found
[  774.259349][T20614] dummy0: entered promiscuous mode
[  774.326512][T20614] dummy0: left promiscuous mode
[  774.823270][T18017] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.602895][T18017] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.971346][ T5839] block nbd1: Receive control failed (result -32)
[  776.024949][ T5839] Bluetooth: hci0: command tx timeout
[  776.206088][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5958'.
[  776.260655][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5958'.
[  776.344172][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5959'.
[  776.363509][T20671] ip6gretap0: entered promiscuous mode
[  776.363709][T20671] macvtap2: entered promiscuous mode
[  776.363886][T20671] macvtap2: entered allmulticast mode
[  776.363911][T20671] ip6gretap0: entered allmulticast mode
[  776.396645][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5959'.
[  776.466109][T20673] ip6gretap0: left allmulticast mode
[  776.466368][T20673] ip6gretap0: left promiscuous mode
[  776.519692][T20502] bridge0: port 1(bridge_slave_0) entered blocking state
[  776.520543][T20502] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.520827][T20502] bridge_slave_0: entered allmulticast mode
[  776.527298][T20502] bridge_slave_0: entered promiscuous mode
[  776.565165][T20502] bridge0: port 2(bridge_slave_1) entered blocking state
[  776.565290][T20502] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.565537][T20502] bridge_slave_1: entered allmulticast mode
[  776.570194][T20502] bridge_slave_1: entered promiscuous mode
[  776.831247][T20502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  776.864582][T20502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  777.064875][T20502] team0: Port device team_slave_0 added
[  777.085620][T20698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5970'.
[  777.094524][T20502] team0: Port device team_slave_1 added
[  777.159103][T20698] macvtap3: entered promiscuous mode
[  777.164024][T20698] macvtap3: entered allmulticast mode
[  777.164046][T20698] team0: entered allmulticast mode
[  777.164062][T20698] team_slave_0: entered allmulticast mode
[  777.164082][T20698] team_slave_1: entered allmulticast mode
[  777.175370][T20698] 8021q: adding VLAN 0 to HW filter on device macvtap3
[  777.618246][T20502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  777.618261][T20502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  777.618284][T20502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  777.691601][T20502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  777.691620][T20502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  777.691645][T20502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  778.105289][ T5839] Bluetooth: hci0: command tx timeout
[  778.429427][T20732] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5984'.
[  778.486958][T20735] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5984'.
[  778.577119][T20502] hsr_slave_0: entered promiscuous mode
[  778.599966][T20502] hsr_slave_1: entered promiscuous mode
[  778.619822][T20502] debugfs: 'hsr0' already exists in 'hsr'
[  778.619843][T20502] Cannot create hsr debugfs directory
[  778.906467][T20739] vlan2: entered promiscuous mode
[  779.346560][T18017] bridge_slave_1: left allmulticast mode
[  779.346592][T18017] bridge_slave_1: left promiscuous mode
[  779.346833][T18017] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.426634][T18017] bridge_slave_0: left allmulticast mode
[  779.426663][T18017] bridge_slave_0: left promiscuous mode
[  779.426861][T18017] bridge0: port 1(bridge_slave_0) entered disabled state
[  780.665847][T18017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  780.746539][T18017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  780.788448][T18017] bond0 (unregistering): Released all slaves
[  780.991571][T20741] dummy0: entered promiscuous mode
[  781.067600][T20741] dummy0: left promiscuous mode
[  782.234902][T20753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  782.763452][T20861] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6042'.
[  782.968057][T18017] hsr_slave_0: left promiscuous mode
[  783.004927][T18017] hsr_slave_1: left promiscuous mode
[  783.006349][T18017] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  783.006377][T18017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  783.093592][T18017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  783.093623][T18017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  783.242038][T18017] veth1_macvtap: left promiscuous mode
[  783.242149][T18017] veth0_macvtap: left promiscuous mode
[  783.242411][T18017] veth1_vlan: left promiscuous mode
[  783.242600][T18017] veth0_vlan: left promiscuous mode
[  784.587066][T18017] team0 (unregistering): Port device team_slave_1 removed
[  784.647122][T18017] team0 (unregistering): Port device team_slave_0 removed
[  785.306398][T20868] dummy0: entered promiscuous mode
[  785.339256][T20868] dummy0: left promiscuous mode
[  785.415288][T20873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  785.417024][T20875] syzkaller0: entered promiscuous mode
[  785.417049][T20875] syzkaller0: entered allmulticast mode
[  785.712797][ T5480] 8021q: adding VLAN 0 to HW filter on device eth21
[  785.776252][T20867] tipc: Resetting bearer <eth:syzkaller0>
[  786.080255][T20867] tipc: Disabling bearer <eth:syzkaller0>
[  786.587592][T20993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6097'.
[  787.922682][T21015] netlink: 'syz.3.6103': attribute type 1 has an invalid length.
[  788.419988][T21015] 8021q: adding VLAN 0 to HW filter on device bond2
[  788.810721][T21017] bond2: (slave gretap1): making interface the new active one
[  788.974666][T21017] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  790.556986][T21060] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  790.597675][T21062] syzkaller0: entered promiscuous mode
[  790.597705][T21062] syzkaller0: entered allmulticast mode
[  791.004587][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6131'.
[  791.070414][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6131'.
[  791.086882][T21073] tipc: Resetting bearer <eth:syzkaller0>
[  791.264554][T21073] tipc: Disabling bearer <eth:syzkaller0>
[  791.437375][T21111] syz_tun: entered promiscuous mode
[  791.437517][T21111] macvtap3: entered promiscuous mode
[  791.437662][T21111] macvtap3: entered allmulticast mode
[  791.437673][T21111] syz_tun: entered allmulticast mode
[  791.525685][T21112] syz_tun: left allmulticast mode
[  791.525947][T21112] syz_tun: left promiscuous mode
[  794.487625][T20502] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  794.811073][T20502] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  794.828892][T20502] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  795.176372][T20502] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  795.179082][T20502] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  795.302160][T20502] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  795.310420][T20502] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  795.423619][T20502] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  795.527273][T21221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6172'.
[  795.581379][T21221] syz_tun: entered promiscuous mode
[  795.581572][T21221] macvtap4: entered promiscuous mode
[  795.581757][T21221] macvtap4: entered allmulticast mode
[  795.581769][T21221] syz_tun: entered allmulticast mode
[  795.607136][T21222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6172'.
[  796.019850][T21222] syz_tun: left allmulticast mode
[  796.020129][T21222] syz_tun: left promiscuous mode
[  797.096176][T20502] 8021q: adding VLAN 0 to HW filter on device bond0
[  797.546772][T20502] 8021q: adding VLAN 0 to HW filter on device team0
[  797.611775][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.611930][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  797.666883][T18018] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.667907][T18018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  798.019752][T21290] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6190'.
[  798.024119][T21290] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6190'.
[  798.577162][T21306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  798.579985][T21306] syzkaller0: entered promiscuous mode
[  798.580010][T21306] syzkaller0: entered allmulticast mode
[  798.710272][T21306] tipc: Resetting bearer <eth:syzkaller0>
[  798.835328][T21304] tipc: Resetting bearer <eth:syzkaller0>
[  799.036671][T21304] tipc: Disabling bearer <eth:syzkaller0>
[  799.313269][T20502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  800.114134][T21365] dummy0: entered promiscuous mode
[  800.155912][T21365] dummy0: left promiscuous mode
[  800.549190][T20502] veth0_vlan: entered promiscuous mode
[  800.576015][T20502] veth1_vlan: entered promiscuous mode
[  801.320513][T20502] veth0_macvtap: entered promiscuous mode
[  801.346408][T20502] veth1_macvtap: entered promiscuous mode
[  801.409602][T20502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  801.451036][T20502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  801.550786][T18018] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  801.553203][T18018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  801.577759][T18018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  801.579308][T18018] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  802.253246][T21410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6232'.
[  802.254333][T21410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6232'.
[  802.514319][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6237'.
[  802.570472][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6237'.
[  804.096462][ T3586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  804.096485][ T3586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  805.732680][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6257'.
[  805.784023][T21474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6257'.
[  806.049854][T21471] macvtap5: entered promiscuous mode
[  806.050257][T21471] macvtap5: entered allmulticast mode
[  806.053807][T21471] 8021q: adding VLAN 0 to HW filter on device macvtap5
[  806.104954][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  806.104979][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  806.767505][T21496] netlink: 'syz.3.6265': attribute type 1 has an invalid length.
[  807.106314][T21496] 8021q: adding VLAN 0 to HW filter on device bond3
[  807.334028][T21499] vlan2: entered allmulticast mode
[  807.334054][T21499] bond3: entered allmulticast mode
[  807.529836][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  807.578471][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  807.599419][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  807.693718][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  807.703414][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  808.912061][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  808.912133][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  809.582125][T21523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6271'.
[  809.870243][ T5839] Bluetooth: hci3: command tx timeout
[  810.097319][ T3586] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.290518][T21523] macvtap4: entered promiscuous mode
[  810.290778][T21523] macvtap4: entered allmulticast mode
[  810.292696][T21523] 8021q: adding VLAN 0 to HW filter on device macvtap4
[  810.337984][T21529] syzkaller0: entered promiscuous mode
[  810.338005][T21529] syzkaller0: entered allmulticast mode
[  810.906432][ T5839] block nbd2: Receive control failed (result -32)
[  811.026486][T21554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6277'.
[  811.026775][T21554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6277'.
[  811.501377][T21572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6282'.
[  811.688957][ T3586] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  811.944836][ T5839] Bluetooth: hci3: command tx timeout
[  812.604183][T21570] netlink: 'syz.3.6279': attribute type 12 has an invalid length.
[  812.776420][T21572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6282'.
[  812.967207][T21586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6285'.
[  812.976830][T18018] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  813.123507][T21586] macvtap6: entered promiscuous mode
[  813.123803][T21586] macvtap6: entered allmulticast mode
[  813.159398][T21586] 8021q: adding VLAN 0 to HW filter on device macvtap6
[  813.168807][T21588] block nbd0: NBD_DISCONNECT
[  813.169220][T21588] block nbd0: Send disconnect failed -32
[  813.169252][T21588] block nbd0: shutting down sockets
[  813.192981][T18018] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  813.289399][T21597] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6288'.
[  813.289549][T21597] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6288'.
[  813.653562][ T3586] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  813.671207][T21604] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6290'.
[  813.725639][T18018] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  813.851934][T18018] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  814.027869][ T5839] Bluetooth: hci3: command tx timeout
[  814.256976][T21618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6293'.
[  814.503180][T21625] sock: sock_timestamping_bind_phc: sock not bind to device
[  814.542532][ T3586] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.656082][T21618] veth0_to_bridge: entered promiscuous mode
[  814.656113][T21618] veth0_to_bridge: entered allmulticast mode
[  814.741779][T21503] chnl_net:caif_netlink_parms(): no params data found
[  815.423993][T21503] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.424331][T21503] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.424536][T21503] bridge_slave_0: entered allmulticast mode
[  815.427512][T21503] bridge_slave_0: entered promiscuous mode
[  815.459952][T21503] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.464842][T21503] bridge0: port 2(bridge_slave_1) entered disabled state
[  815.465516][T21503] bridge_slave_1: entered allmulticast mode
[  815.498073][T21503] bridge_slave_1: entered promiscuous mode
[  815.562952][T21642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6300'.
[  815.639349][T21642] team_slave_0: entered promiscuous mode
[  815.639389][T21642] team_slave_1: entered promiscuous mode
[  815.639559][T21642] macvtap1: entered promiscuous mode
[  815.639569][T21642] team0: entered promiscuous mode
[  815.639999][T21642] macvtap1: entered allmulticast mode
[  815.640010][T21642] team0: entered allmulticast mode
[  815.640019][T21642] team_slave_0: entered allmulticast mode
[  815.640031][T21642] team_slave_1: entered allmulticast mode
[  815.770556][T21642] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  815.929454][T21503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  816.104992][ T5839] Bluetooth: hci3: command tx timeout
[  816.203668][T21503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  816.797462][T21503] team0: Port device team_slave_0 added
[  816.814233][T21503] team0: Port device team_slave_1 added
[  817.108243][T21666] __nla_validate_parse: 1 callbacks suppressed
[  817.108258][T21666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6308'.
[  817.161473][T21667] netlink: 59 bytes leftover after parsing attributes in process `syz.3.6308'.
[  817.381399][T21503] batman_adv: batadv0: Adding interface: batadv_slave_0
[  817.381419][T21503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  817.381450][T21503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  817.449165][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6311'.
[  817.578627][T21503] batman_adv: batadv0: Adding interface: batadv_slave_1
[  817.578646][T21503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  817.578673][T21503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  818.118415][ T3586] bridge_slave_1: left allmulticast mode
[  818.118449][ T3586] bridge_slave_1: left promiscuous mode
[  818.118737][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.197486][ T3586] bridge_slave_0: left allmulticast mode
[  818.197521][ T3586] bridge_slave_0: left promiscuous mode
[  818.198051][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state
[  819.266207][ T3586] gretap0 (unregistering): left allmulticast mode
[  819.685564][ T3586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  819.765862][ T3586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  819.787831][ T3586] bond0 (unregistering): Released all slaves
[  819.846495][T21684] ip6gretap0: entered promiscuous mode
[  819.846891][T21684] vlan3: entered promiscuous mode
[  820.062332][T21681] syzkaller1: entered promiscuous mode
[  820.062356][T21681] syzkaller1: entered allmulticast mode
[  820.532361][T21707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6320'.
[  820.580574][T21709] sctp: [Deprecated]: syz.6.6321 (pid 21709) Use of struct sctp_assoc_value in delayed_ack socket option.
[  820.580574][T21709] Use struct sctp_sack_info instead
[  820.641937][T21711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6322'.
[  820.693120][T21714] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6323'.
[  820.694071][T21715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6322'.
[  820.893815][T21711] hsr0: entered promiscuous mode
[  820.893863][T21711] hsr0: entered allmulticast mode
[  820.893878][T21711] hsr_slave_0: entered allmulticast mode
[  820.893898][T21711] hsr_slave_1: entered allmulticast mode
[  821.006637][T21718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6324'.
[  821.222599][T21503] hsr_slave_0: entered promiscuous mode
[  821.280596][T21503] hsr_slave_1: entered promiscuous mode
[  821.294440][T21503] debugfs: 'hsr0' already exists in 'hsr'
[  821.294471][T21503] Cannot create hsr debugfs directory
[  822.376938][T21731] netlink: 'syz.6.6326': attribute type 12 has an invalid length.
[  822.817282][T21752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6332'.
[  823.052920][ T3586] hsr_slave_0: left promiscuous mode
[  823.088995][ T3586] hsr_slave_1: left promiscuous mode
[  823.090156][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  823.090182][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0
[  823.147841][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  823.147871][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1
[  823.292873][ T3586] veth1_macvtap: left promiscuous mode
[  823.292988][ T3586] veth0_macvtap: left promiscuous mode
[  823.293256][ T3586] veth1_vlan: left promiscuous mode
[  823.312779][ T3586] veth0_vlan: left promiscuous mode
[  824.230317][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6336'.
[  825.251104][ T3586] team_slave_1 (unregistering): left promiscuous mode
[  825.286157][ T3586] team0 (unregistering): Port device team_slave_1 removed
[  825.310179][ T3586] team_slave_0 (unregistering): left promiscuous mode
[  825.348036][ T3586] team0 (unregistering): Port device team_slave_0 removed
[  825.668386][T21753] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  825.668431][T21753] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  825.670017][T21753] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  825.917052][T21776] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  825.917091][T21776] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  825.917109][T21776] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  826.258025][T21787] netlink: 'syz.6.6341': attribute type 12 has an invalid length.
[  826.515259][T21791] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6342'.
[  827.101996][T21801] netlink: 'syz.3.6344': attribute type 12 has an invalid length.
[  827.373597][T21807] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6346'.
[  828.480750][T21820] binder: BINDER_SET_CONTEXT_MGR already set
[  828.480767][T21820] binder: 21819:21820 ioctl 4018620d 200000000040 returned -16
[  828.481298][T21820] binder: 21819:21820 ioctl c0306201 200000000240 returned -11
[  828.834849][  T821] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  828.844211][ T3586] IPVS: stop unused estimator thread 0...
[  828.984914][  T821] usb 9-1: Using ep0 maxpacket: 32
[  828.988218][  T821] usb 9-1: unable to get BOS descriptor or descriptor too short
[  828.989815][  T821] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  828.989873][  T821] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  828.992663][  T821] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  828.992688][  T821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.992707][  T821] usb 9-1: Product: syz
[  828.992719][  T821] usb 9-1: Manufacturer: syz
[  828.992731][  T821] usb 9-1: SerialNumber: syz
[  829.314861][T21835] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  829.322312][  T821] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  829.322371][  T821] usb 9-1: MIDIStreaming interface descriptor not found
[  829.598117][  T821] usb 9-1: USB disconnect, device number 3
[  829.931997][T16248] udevd[16248]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  830.021667][T21843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6354'.
[  830.950499][ T5480] 8021q: adding VLAN 0 to HW filter on device eth21
[  831.002498][T21853] syzkaller0: entered promiscuous mode
[  831.002529][T21853] syzkaller0: entered allmulticast mode
[  831.379313][T21876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6363'.
[  832.452130][T21896] binder: BINDER_SET_CONTEXT_MGR already set
[  832.452147][T21896] binder: 21894:21896 ioctl 4018620d 200000000040 returned -16
[  832.454285][T21896] binder: 21894:21896 ioctl c0306201 200000000240 returned -11
[  832.490446][T21898] netlink: 'syz.4.6365': attribute type 12 has an invalid length.
[  832.548909][T21901] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6366'.
[  832.789476][ T5983] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  833.006769][ T5983] usb 7-1: Using ep0 maxpacket: 32
[  833.027911][ T5983] usb 7-1: unable to get BOS descriptor or descriptor too short
[  833.032458][ T5983] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  833.032515][ T5983] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  833.095305][ T5983] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  833.095339][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.095363][ T5983] usb 7-1: Product: syz
[  833.095390][ T5983] usb 7-1: Manufacturer: syz
[  833.095406][ T5983] usb 7-1: SerialNumber: syz
[  833.652385][ T5983] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  833.652448][ T5983] usb 7-1: MIDIStreaming interface descriptor not found
[  834.379155][ T5983] usb 7-1: USB disconnect, device number 6
[  835.010655][T21938] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6377'.
[  835.047920][T16477] udevd[16477]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  836.642323][T21966] netlink: 'syz.4.6384': attribute type 12 has an invalid length.
[  836.757302][T21976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6386'.
[  836.821787][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6386'.
[  836.849248][T21976] bridge0: entered promiscuous mode
[  836.849538][T21976] macvtap7: entered promiscuous mode
[  836.849745][T21976] macvtap7: entered allmulticast mode
[  836.849762][T21976] bridge0: entered allmulticast mode
[  837.137111][T21977] bridge0: left allmulticast mode
[  837.137336][T21977] bridge0: left promiscuous mode
[  837.533464][T21992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6389'.
[  837.574379][T21992] syz_tun: entered promiscuous mode
[  837.577906][T21992] macvtap2: entered promiscuous mode
[  837.578410][T21992] macvtap2: entered allmulticast mode
[  837.578455][T21992] syz_tun: entered allmulticast mode
[  837.611128][T21996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6389'.
[  837.613896][T21503] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  837.855055][T21503] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  837.970691][T21996] syz_tun: left allmulticast mode
[  837.971068][T21996] syz_tun: left promiscuous mode
[  838.011660][T21503] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  838.163364][T21503] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  838.174094][T21503] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  838.247550][T21503] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  838.331112][T21503] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  838.439389][T21503] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  839.037262][T22031] syzkaller0: entered promiscuous mode
[  839.037286][T22031] syzkaller0: entered allmulticast mode
[  839.400654][T21503] 8021q: adding VLAN 0 to HW filter on device bond0
[  839.450437][T22042] netlink: 'syz.4.6399': attribute type 10 has an invalid length.
[  839.490468][T22045] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6398'.
[  840.674305][T21503] 8021q: adding VLAN 0 to HW filter on device team0
[  840.739278][T18018] bridge0: port 1(bridge_slave_0) entered blocking state
[  840.739634][T18018] bridge0: port 1(bridge_slave_0) entered forwarding state
[  840.825146][T18018] bridge0: port 2(bridge_slave_1) entered blocking state
[  840.826069][T18018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  841.086661][T22065] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6407'.
[  841.162504][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6407'.
[  841.187000][T22065] syz_tun: entered promiscuous mode
[  841.187147][T22065] macvtap8: entered promiscuous mode
[  841.187291][T22065] macvtap8: entered allmulticast mode
[  841.187301][T22065] syz_tun: entered allmulticast mode
[  841.248761][T22071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6403'.
[  841.275479][T22069] syz_tun: left allmulticast mode
[  841.275863][T22069] syz_tun: left promiscuous mode
[  841.301582][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6403'.
[  841.371921][T22071] syz_tun: entered promiscuous mode
[  841.372328][T22071] macvtap3: entered promiscuous mode
[  841.392695][T22071] macvtap3: entered allmulticast mode
[  841.392722][T22071] syz_tun: entered allmulticast mode
[  841.515704][T22072] syz_tun: left allmulticast mode
[  841.515959][T22072] syz_tun: left promiscuous mode
[  841.913818][T22083] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6408'.
[  841.982493][T21503] 8021q: adding VLAN 0 to HW filter on device batadv0
[  842.081472][T22087] netlink: 'syz.6.6409': attribute type 10 has an invalid length.
[  842.477869][T22099] bond0: (slave vlan2): Opening slave failed
[  842.694746][   T36] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  842.747973][T21503] veth0_vlan: entered promiscuous mode
[  842.772134][T21503] veth1_vlan: entered promiscuous mode
[  842.863128][T21503] veth0_macvtap: entered promiscuous mode
[  842.874869][   T36] usb 5-1: Using ep0 maxpacket: 8
[  842.879088][   T36] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  842.879132][   T36] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  842.879149][   T36] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  842.879167][   T36] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  842.879184][   T36] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  842.879260][   T36] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  842.879278][   T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.882818][T21503] veth1_macvtap: entered promiscuous mode
[  843.041499][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6415'.
[  843.224006][   T36] usb 5-1: usb_control_msg returned -32
[  843.224067][   T36] usbtmc 5-1:16.0: can't read capabilities
[  843.323471][T21503] batman_adv: batadv0: Interface activated: batadv_slave_0
[  843.346001][T21503] batman_adv: batadv0: Interface activated: batadv_slave_1
[  843.399044][T18017] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  843.400734][T18017] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  843.401438][T18017] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  843.402918][T18017] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  843.582353][ T5983] usb 5-1: USB disconnect, device number 11
[  843.906583][T22124] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6419'.
[  843.991807][T22123] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6421'.
[  843.991840][T22123] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6421'.
[  844.680147][T22132] syz_tun: entered promiscuous mode
[  844.680539][T22132] vlan2: entered promiscuous mode
[  844.926131][T22142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  846.000039][T22130] syzkaller1: entered promiscuous mode
[  846.000071][T22130] syzkaller1: entered allmulticast mode
[  846.013776][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6428'.
[  846.063312][T22157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6428'.
[  846.086429][T22158] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6427'.
[  846.274213][T22164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6430'.
[  846.274242][T22164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6430'.
[  846.385370][T22155] syz_tun: entered promiscuous mode
[  846.385518][T22155] macvtap9: entered promiscuous mode
[  846.385663][T22155] macvtap9: entered allmulticast mode
[  846.385673][T22155] syz_tun: entered allmulticast mode
[  847.009580][T22157] syz_tun: left allmulticast mode
[  847.009879][T22157] syz_tun: left promiscuous mode
[  847.120892][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  847.120917][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  847.480998][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  847.481022][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  847.837975][T22184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6437'.
[  847.891607][T22184] vlan2: entered promiscuous mode
[  848.513415][T22199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6441'.
[  848.649339][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6442'.
[  849.011990][T22214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6444'.
[  849.587698][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6453'.
[  849.587721][T22230] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6453'.
[  849.771720][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6453'.
[  849.771746][T22230] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6453'.
[  849.837852][T22235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6454'.
[  849.837878][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6454'.
[  850.120240][T22240] syzkaller0: entered promiscuous mode
[  850.120269][T22240] syzkaller0: entered allmulticast mode
[  850.962449][T22260] syzkaller1: entered promiscuous mode
[  850.962477][T22260] syzkaller1: entered allmulticast mode
[  852.933450][T22292] __nla_validate_parse: 4 callbacks suppressed
[  852.933472][T22292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6469'.
[  852.933488][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6469'.
[  852.969659][T22291] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6470'.
[  852.987960][T22291] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6470'.
[  853.209366][T22292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6469'.
[  853.209392][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6469'.
[  853.485121][T22305] sctp: [Deprecated]: syz.8.6475 (pid 22305) Use of struct sctp_assoc_value in delayed_ack socket option.
[  853.485121][T22305] Use struct sctp_sack_info instead
[  853.627823][T22313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6478'.
[  853.627849][T22313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6478'.
[  853.671667][T22303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6474'.
[  853.821518][T22317] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6479'.
[  854.955977][   T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  855.133980][   T31] usb 5-1: Using ep0 maxpacket: 8
[  855.168582][   T31] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  855.168643][   T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  855.168667][   T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  855.168691][   T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  855.168715][   T31] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  855.168761][   T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  855.168785][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  855.477249][   T31] usb 5-1: usb_control_msg returned -32
[  855.477300][   T31] usbtmc 5-1:16.0: can't read capabilities
[  855.758256][ T5983] usb 5-1: USB disconnect, device number 12
[  856.244849][ T5983] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  856.328793][T22357] syzkaller0: entered promiscuous mode
[  856.328818][T22357] syzkaller0: entered allmulticast mode
[  856.400486][T22362] syzkaller0: entered promiscuous mode
[  856.400513][T22362] syzkaller0: entered allmulticast mode
[  856.406087][ T5983] usb 5-1: device descriptor read/64, error -71
[  856.704740][ T5983] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  856.885539][ T5983] usb 5-1: device descriptor read/64, error -71
[  857.024545][ T5983] usb usb5-port1: attempt power cycle
[  857.424827][ T5983] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  857.445742][ T5983] usb 5-1: device descriptor read/8, error -71
[  857.736191][ T5983] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  857.881986][T22374] 8021q: VLANs not supported on ip6gre0
[  857.944906][ T5983] usb 5-1: device not accepting address 16, error -71
[  857.945504][ T5983] usb usb5-port1: unable to enumerate USB device
[  857.979999][T22385] __nla_validate_parse: 13 callbacks suppressed
[  857.980032][T22385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6502'.
[  857.980050][T22385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6502'.
[  858.219105][T22392] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6503'.
[  858.219130][T22392] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6503'.
[  858.252357][T22394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6504'.
[  858.299025][T22394] ip6gretap0: entered promiscuous mode
[  858.299240][T22394] macvtap4: entered promiscuous mode
[  858.299364][T22394] macvtap4: entered allmulticast mode
[  858.299374][T22394] ip6gretap0: entered allmulticast mode
[  858.304096][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6504'.
[  858.478889][T22398] ip6gretap0: left allmulticast mode
[  858.479104][T22398] ip6gretap0: left promiscuous mode
[  858.606363][T22404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6509'.
[  858.606388][T22404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6509'.
[  858.869088][T22412] bridge_slave_0: left allmulticast mode
[  858.869121][T22412] bridge_slave_0: left promiscuous mode
[  858.869383][T22412] bridge0: port 1(bridge_slave_0) entered disabled state
[  858.998178][T22412] bridge_slave_1: left allmulticast mode
[  858.998210][T22412] bridge_slave_1: left promiscuous mode
[  858.998448][T22412] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.147513][T22412] bond0: (slave bond_slave_0): Releasing backup interface
[  859.200877][T22414] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6512'.
[  859.235696][T22412] bond0: (slave bond_slave_1): Releasing backup interface
[  859.254002][T22415] netlink: 51 bytes leftover after parsing attributes in process `syz.8.6512'.
[  859.304241][T22412] team0: Port device team_slave_0 removed
[  859.354457][T22412] team0: Port device team_slave_1 removed
[  859.356436][T22412] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  859.356467][T22412] batman_adv: batadv0: Removing interface: batadv_slave_0
[  859.421938][T22412] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  859.421961][T22412] batman_adv: batadv0: Removing interface: batadv_slave_1
[  859.451585][T22412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  859.799952][T22421] macvtap5: entered promiscuous mode
[  859.800178][T22421] macvtap5: entered allmulticast mode
[  859.800194][T22421] syz_tun: entered allmulticast mode
[  859.935641][T22424] syz_tun: left allmulticast mode
[  859.962819][T22425] 8021q: VLANs not supported on ip6gre0
[  861.002011][T22457] 8021q: VLANs not supported on ip6gre0
[  861.434565][T22474] macvtap10: entered promiscuous mode
[  861.435053][T22474] macvtap10: entered allmulticast mode
[  862.546671][T22509] nbd: must specify a device to reconfigure
[  862.550671][T22506] vlan2: entered promiscuous mode
[  862.550694][T22506] team0: entered promiscuous mode
[  862.550709][T22506] team_slave_0: entered promiscuous mode
[  862.559401][T22506] team_slave_1: entered promiscuous mode
[  863.767913][T22526] syzkaller1: entered promiscuous mode
[  863.767943][T22526] syzkaller1: entered allmulticast mode
[  863.772738][T22526] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96
[  863.826006][T22530] __nla_validate_parse: 12 callbacks suppressed
[  863.826028][T22530] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6556'.
[  863.944289][T22531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6557'.
[  864.007519][T22533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6557'.
[  864.074299][T22531] syz_tun: entered promiscuous mode
[  864.074517][T22531] macvtap10: entered promiscuous mode
[  864.083948][T22531] macvtap10: entered allmulticast mode
[  864.084021][T22531] syz_tun: entered allmulticast mode
[  864.139731][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6559'.
[  864.139752][T22536] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6559'.
[  864.283723][T22533] syz_tun: left allmulticast mode
[  864.283996][T22533] syz_tun: left promiscuous mode
[  864.771274][T22546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6560'.
[  864.790792][T22548] sctp: [Deprecated]: syz.6.6561 (pid 22548) Use of struct sctp_assoc_value in delayed_ack socket option.
[  864.790792][T22548] Use struct sctp_sack_info instead
[  864.873212][T22546] bridge0: entered promiscuous mode
[  864.878291][T22546] macvtap5: entered promiscuous mode
[  864.878640][T22546] macvtap5: entered allmulticast mode
[  864.878684][T22546] bridge0: entered allmulticast mode
[  865.194260][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6564'.
[  865.194284][T22556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6564'.
[  865.652996][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6564'.
[  865.653022][T22556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6564'.
[  865.939977][T22573] vlan3: entered promiscuous mode
[  865.940002][T22573] bridge0: entered promiscuous mode
[  866.369784][T22586] sctp: [Deprecated]: syz.8.6575 (pid 22586) Use of struct sctp_assoc_value in delayed_ack socket option.
[  866.369784][T22586] Use struct sctp_sack_info instead
[  866.520385][T22589] sctp: [Deprecated]: syz.4.6574 (pid 22589) Use of struct sctp_assoc_value in delayed_ack socket option.
[  866.520385][T22589] Use struct sctp_sack_info instead
[  867.868994][T22630] sctp: [Deprecated]: syz.8.6590 (pid 22630) Use of struct sctp_assoc_value in delayed_ack socket option.
[  867.868994][T22630] Use struct sctp_sack_info instead
[  867.936181][ T5839] block nbd0: Receive control failed (result -32)
[  869.282525][T22663] __nla_validate_parse: 12 callbacks suppressed
[  869.282548][T22663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6601'.
[  869.627176][ T5839] block nbd3: Receive control failed (result -32)
[  870.069042][T22691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6613'.
[  870.093816][T22693] 8021q: VLANs not supported on ip6gre0
[  870.351223][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  870.351299][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  870.592248][T22695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6615'.
[  870.939716][T22707] veth1_mac: renamed from veth0_vlan
[  871.415941][T22731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6626'.
[  871.727561][T22744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6628'.
[  871.779290][T22746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6628'.
[  871.780794][T22744] syz_tun: entered promiscuous mode
[  871.780958][T22744] macvtap6: entered promiscuous mode
[  871.781101][T22744] macvtap6: entered allmulticast mode
[  871.781112][T22744] syz_tun: entered allmulticast mode
[  871.997555][T22746] syz_tun: left allmulticast mode
[  871.997846][T22746] syz_tun: left promiscuous mode
[  872.424706][ T5840] Bluetooth: hci4: command 0x0406 tx timeout
[  873.119800][ T5842] Bluetooth: hci3: command 0x0405 tx timeout
[  873.196668][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6635'.
[  873.196695][T22780] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6635'.
[  873.690522][ T5480] veth1_mac: left promiscuous mode
[  873.803994][ T5480] veth1_mac: entered promiscuous mode
[  874.117934][T22799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6641'.
[  874.164314][T22799] syz_tun: entered promiscuous mode
[  874.164547][T22799] macvtap7: entered promiscuous mode
[  874.174260][T22799] macvtap7: entered allmulticast mode
[  874.174325][T22799] syz_tun: entered allmulticast mode
[  874.204079][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6641'.
[  874.316864][T22806] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6640'.
[  874.358669][T22803] syz_tun: left allmulticast mode
[  874.358950][T22803] syz_tun: left promiscuous mode
[  874.814430][T22824] netlink: 'syz.4.6650': attribute type 12 has an invalid length.
[  875.403468][T22838] 8021q: VLANs not supported on ip6gre0
[  876.283446][T22858] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6657'.
[  876.520520][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6658'.
[  876.571285][T22865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6658'.
[  876.829512][T22864] syz_tun: entered promiscuous mode
[  876.829751][T22864] macvtap11: entered promiscuous mode
[  876.833430][T22864] macvtap11: entered allmulticast mode
[  876.833452][T22864] syz_tun: entered allmulticast mode
[  877.012424][T22865] syz_tun: left allmulticast mode
[  877.012692][T22865] syz_tun: left promiscuous mode
[  877.358479][T22876] syz.3.6661 (22876) used greatest stack depth: 17144 bytes left
[  877.536347][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6665'.
[  877.536374][T22886] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6665'.
[  877.760282][T22891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6666'.
[  877.815234][T22894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6666'.
[  877.872698][T22891] macvtap8: entered promiscuous mode
[  877.872947][T22891] macvtap8: entered allmulticast mode
[  877.889979][T22891] 8021q: adding VLAN 0 to HW filter on device macvtap8
[  878.314433][T22906] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6669'.
[  878.314461][T22906] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6669'.
[  880.286285][T22935] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  880.440389][T22939] __nla_validate_parse: 3 callbacks suppressed
[  880.440412][T22939] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6680'.
[  880.809953][T22939] vlan2: entered promiscuous mode
[  881.624381][T22956] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6684'.
[  881.712697][T22959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6685'.
[  881.832077][T22961] 8021q: VLANs not supported on ip6gre0
[  882.399874][T22974] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6689'.
[  882.800925][T22978] ip6tnl1: entered allmulticast mode
[  883.120984][T22991] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6698'.
[  883.513913][T23002] 8021q: VLANs not supported on ip6gre0
[  883.770774][T23007] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6701'.
[  883.777556][T23008] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6702'.
[  884.237950][T23019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6706'.
[  884.655604][ T5480] veth0_vlan: left promiscuous mode
[  884.794342][ T5480] veth0_vlan: entered promiscuous mode
[  885.166748][T23034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6711'.
[  885.802833][T23050] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6715'.
[  886.742828][T23072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6723'.
[  886.742856][T23072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6723'.
[  887.900525][T23103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  889.408436][T23137] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6742'.
[  889.408463][T23137] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6742'.
[  889.639046][T23142] netlink: 'syz.9.6743': attribute type 4 has an invalid length.
[  890.219527][T23144] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6744'.
[  890.485824][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6747'.
[  890.702113][T23157] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  890.703268][T23157] syzkaller0: entered promiscuous mode
[  890.703292][T23157] syzkaller0: entered allmulticast mode
[  891.154285][T23164] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6752'.
[  891.447618][T23164] vlan3: entered promiscuous mode
[  891.647068][T23175] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6755'.
[  892.917024][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  892.941670][T23220] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6765'.
[  893.821784][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6770'.
[  893.821810][T23234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6770'.
[  894.212453][T23247] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6773'.
[  894.212481][T23247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6773'.
[  894.415352][T23247] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6773'.
[  894.415381][T23247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6773'.
[  894.415475][  T156] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  894.420146][   T13] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  894.420202][   T13] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  894.420242][   T13] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  894.716846][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6775'.
[  895.435117][T23271] syzkaller0: entered promiscuous mode
[  895.435144][T23271] syzkaller0: entered allmulticast mode
[  896.377165][T23295] __nla_validate_parse: 1 callbacks suppressed
[  896.377188][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6783'.
[  896.424002][T23295] macvtap11: entered promiscuous mode
[  896.424366][T23295] macvtap11: entered allmulticast mode
[  896.437420][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6783'.
[  896.454457][T23295] 8021q: adding VLAN 0 to HW filter on device macvtap11
[  896.978840][T23307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6788'.
[  897.207971][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  897.283574][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  897.309686][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  897.341531][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  897.373353][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  897.811122][T23320] netlink: 276 bytes leftover after parsing attributes in process `syz.6.6793'.
[  898.039717][T23309] chnl_net:caif_netlink_parms(): no params data found
[  898.333431][T23309] bridge0: port 1(bridge_slave_0) entered blocking state
[  898.333696][T23309] bridge0: port 1(bridge_slave_0) entered disabled state
[  898.334025][T23309] bridge_slave_0: entered allmulticast mode
[  898.360056][T23309] bridge_slave_0: entered promiscuous mode
[  898.381840][T23309] bridge0: port 2(bridge_slave_1) entered blocking state
[  898.382103][T23309] bridge0: port 2(bridge_slave_1) entered disabled state
[  898.382789][T23309] bridge_slave_1: entered allmulticast mode
[  898.400175][T23309] bridge_slave_1: entered promiscuous mode
[  898.494336][T23309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  898.513851][T23309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  898.654104][T23309] team0: Port device team_slave_0 added
[  898.677386][T23309] team0: Port device team_slave_1 added
[  898.744170][T23309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  898.744189][T23309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  898.744232][T23309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  898.811716][T23309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  898.811735][T23309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  898.811765][T23309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  899.025126][T23309] hsr_slave_0: entered promiscuous mode
[  899.026234][T23309] hsr_slave_1: entered promiscuous mode
[  899.026915][T23309] debugfs: 'hsr0' already exists in 'hsr'
[  899.026934][T23309] Cannot create hsr debugfs directory
[  899.447749][T23342] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6799'.
[  899.544852][ T5839] Bluetooth: hci2: command tx timeout
[  900.448701][T23369] netlink: 276 bytes leftover after parsing attributes in process `syz.6.6804'.
[  901.611714][T23401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6808'.
[  901.624732][ T5839] Bluetooth: hci2: command 0x041b tx timeout
[  902.973943][T23427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6812'.
[  903.422559][T23415] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  903.422607][T23415] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  903.422629][T23415] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  903.704731][ T5839] Bluetooth: hci2: command 0x041b tx timeout
[  904.730523][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6820'.
[  905.640473][T23470] syzkaller0: entered promiscuous mode
[  905.640503][T23470] syzkaller0: entered allmulticast mode
[  905.788957][ T5839] Bluetooth: hci2: command 0x041b tx timeout
[  907.108726][T23512] binder: BINDER_SET_CONTEXT_MGR already set
[  907.108747][T23512] binder: 23511:23512 ioctl 4018620d 200000000040 returned -16
[  907.110199][T23512] binder: 23511:23512 ioctl c0306201 200000000240 returned -11
[  907.524938][   T36] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  907.601221][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6832'.
[  907.755048][   T36] usb 5-1: Using ep0 maxpacket: 32
[  907.757799][   T36] usb 5-1: unable to get BOS descriptor or descriptor too short
[  907.758937][   T36] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  907.758983][   T36] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  907.761655][   T36] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  907.761686][   T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.761707][   T36] usb 5-1: Product: syz
[  907.761721][   T36] usb 5-1: Manufacturer: syz
[  907.761737][   T36] usb 5-1: SerialNumber: syz
[  907.864956][ T5839] Bluetooth: hci2: command 0x041b tx timeout
[  908.178688][   T36] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  908.178752][   T36] usb 5-1: MIDIStreaming interface descriptor not found
[  908.788767][   T36] usb 5-1: USB disconnect, device number 17
[  909.951184][ T5839] Bluetooth: hci2: command 0x041b tx timeout
[  910.321386][T23309] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  910.369056][T23309] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  910.498462][T23309] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  910.570306][T23309] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  910.572962][T23309] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  910.625811][T23309] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  910.765645][T23309] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  910.810073][T23309] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  911.420807][T23585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6842'.
[  911.607985][T23309] 8021q: adding VLAN 0 to HW filter on device bond0
[  911.738779][T23309] 8021q: adding VLAN 0 to HW filter on device team0
[  911.786390][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[  911.786550][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  911.877737][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  911.952224][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  911.956781][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[  911.956910][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  912.000068][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  912.005341][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  912.011591][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  912.733380][T23604] binder: BINDER_SET_CONTEXT_MGR already set
[  912.733399][T23604] binder: 23594:23604 ioctl 4018620d 200000000040 returned -16
[  912.741832][T23604] binder: 23594:23604 ioctl c0306201 200000000240 returned -11
[  913.075260][  T822] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  913.284776][  T822] usb 7-1: Using ep0 maxpacket: 32
[  913.287890][  T822] usb 7-1: unable to get BOS descriptor or descriptor too short
[  913.289464][  T822] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  913.289539][  T822] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  913.293838][  T822] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  913.293876][  T822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.293899][  T822] usb 7-1: Product: syz
[  913.293916][  T822] usb 7-1: Manufacturer: syz
[  913.293930][  T822] usb 7-1: SerialNumber: syz
[  913.627650][  T822] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  913.627709][  T822] usb 7-1: MIDIStreaming interface descriptor not found
[  914.113413][  T822] usb 7-1: USB disconnect, device number 7
[  914.187985][ T5842] Bluetooth: hci6: command tx timeout
[  914.442604][T23309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  914.786987][T16248] udevd[16248]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  915.940072][T23309] veth0_vlan: entered promiscuous mode
[  916.147697][T23590] chnl_net:caif_netlink_parms(): no params data found
[  916.264731][ T5842] Bluetooth: hci6: command tx timeout
[  916.749300][T23309] veth1_vlan: entered promiscuous mode
[  916.791652][T23677] binder: BINDER_SET_CONTEXT_MGR already set
[  916.791670][T23677] binder: 23676:23677 ioctl 4018620d 200000000040 returned -16
[  916.792221][T23677] binder: 23676:23677 ioctl c0306201 200000000240 returned -11
[  917.124907][   T31] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  917.171297][T23590] bridge0: port 1(bridge_slave_0) entered blocking state
[  917.171528][T23590] bridge0: port 1(bridge_slave_0) entered disabled state
[  917.171861][T23590] bridge_slave_0: entered allmulticast mode
[  917.213413][T23590] bridge_slave_0: entered promiscuous mode
[  917.233746][T23590] bridge0: port 2(bridge_slave_1) entered blocking state
[  917.233902][T23590] bridge0: port 2(bridge_slave_1) entered disabled state
[  917.234184][T23590] bridge_slave_1: entered allmulticast mode
[  917.269589][T23590] bridge_slave_1: entered promiscuous mode
[  917.354993][   T31] usb 9-1: Using ep0 maxpacket: 32
[  917.362977][   T31] usb 9-1: unable to get BOS descriptor or descriptor too short
[  917.379229][   T31] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  917.379285][   T31] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  917.411829][   T31] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  917.411862][   T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  917.411883][   T31] usb 9-1: Product: syz
[  917.411898][   T31] usb 9-1: Manufacturer: syz
[  917.411913][   T31] usb 9-1: SerialNumber: syz
[  917.681484][   T31] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  917.681542][   T31] usb 9-1: MIDIStreaming interface descriptor not found
[  918.150532][   T31] usb 9-1: USB disconnect, device number 4
[  918.340039][T16248] udevd[16248]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  918.345178][ T5842] Bluetooth: hci6: command tx timeout
[  918.789555][T23709] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6860'.
[  918.789581][T23709] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6860'.
[  918.895571][T23590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  918.968270][T23590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  919.045406][T23590] team0: Port device team_slave_0 added
[  919.069412][T23590] team0: Port device team_slave_1 added
[  919.070392][T23309] veth0_macvtap: entered promiscuous mode
[  919.151479][T23590] batman_adv: batadv0: Adding interface: batadv_slave_0
[  919.151497][T23590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  919.151521][T23590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  919.255213][T23309] veth1_macvtap: entered promiscuous mode
[  919.336826][T23590] batman_adv: batadv0: Adding interface: batadv_slave_1
[  919.336846][T23590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  919.336878][T23590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  919.802097][T23590] hsr_slave_0: entered promiscuous mode
[  919.804143][T23590] hsr_slave_1: entered promiscuous mode
[  919.807538][T23590] debugfs: 'hsr0' already exists in 'hsr'
[  919.807570][T23590] Cannot create hsr debugfs directory
[  919.816381][T23309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  920.060950][T23309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  920.430542][ T5842] Bluetooth: hci6: command tx timeout
[  920.509628][T23739] netlink: 'syz.4.6867': attribute type 8 has an invalid length.
[  920.509651][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6867'.
[  920.738108][   T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  920.821996][   T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  920.875483][   T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  920.902263][   T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  926.014120][ T3586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  926.014145][ T3586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  927.570668][T23875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6887'.
[  927.810030][T23872] syzkaller1: entered promiscuous mode
[  927.810054][T23872] syzkaller1: entered allmulticast mode
[  927.828109][ T3586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  927.828134][ T3586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  928.799139][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6789'.
[  928.799164][T23896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6789'.
[  929.075298][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6789'.
[  929.075326][T23896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6789'.
[  929.462894][T23908] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6891'.
[  929.462920][T23908] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6891'.
[  929.829645][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  929.975699][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  930.050128][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  930.054391][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  930.245975][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6892'.
[  930.246003][T23922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6892'.
[  930.466190][T23926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6895'.
[  930.859045][T23926] vlan2: entered promiscuous mode
[  930.859063][T23926] syz_tun: entered promiscuous mode
[  931.805002][T23963] block nbd0: NBD_DISCONNECT
[  931.806509][T23963] block nbd0: Send disconnect failed -32
[  931.806535][T23963] block nbd0: shutting down sockets
[  931.822946][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  931.852583][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  932.761858][T23590] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  932.817772][T23590] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  932.875169][T23590] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  932.928360][T23590] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  933.032665][T23590] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  933.411555][T23590] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  933.556163][T23590] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  933.691018][T23590] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  934.476539][T24014] __nla_validate_parse: 1 callbacks suppressed
[  934.476559][T24014] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6908'.
[  934.836079][T23590] 8021q: adding VLAN 0 to HW filter on device bond0
[  934.903038][T23590] 8021q: adding VLAN 0 to HW filter on device team0
[  934.939943][ T3586] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.941675][ T3586] bridge0: port 1(bridge_slave_0) entered forwarding state
[  935.057367][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  935.057541][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  935.151787][T24025] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6910'.
[  935.270915][T24025] vlan3: entered promiscuous mode
[  935.997853][T24037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  936.005152][T24048] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6915'.
[  936.005178][T24048] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6915'.
[  936.130325][T24050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  937.094074][T23590] 8021q: adding VLAN 0 to HW filter on device batadv0
[  937.932812][T23590] veth0_vlan: entered promiscuous mode
[  937.982533][T23590] veth1_vlan: entered promiscuous mode
[  938.680435][T24102] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6926'.
[  938.680463][T24102] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6926'.
[  938.909322][T23590] veth0_macvtap: entered promiscuous mode
[  938.934024][T23590] veth1_macvtap: entered promiscuous mode
[  939.041971][T23590] batman_adv: batadv0: Interface activated: batadv_slave_0
[  939.094493][T23590] batman_adv: batadv0: Interface activated: batadv_slave_1
[  939.159137][ T1242] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  939.160305][ T1242] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  939.160356][ T1242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  939.160397][ T1242] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  939.215013][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6927'.
[  939.703770][T24115] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6928'.
[  939.780279][T24116] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6928'.
[  940.628758][ T3586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  940.628781][ T3586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  940.989037][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  940.989062][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  942.652234][T24172] tipc: Started in network mode
[  942.652269][T24172] tipc: Node identity b2fe6dd46091, cluster identity 4711
[  942.652456][T24172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  942.685185][T24172] syzkaller0: entered promiscuous mode
[  942.685213][T24172] syzkaller0: entered allmulticast mode
[  942.901462][T24172] tipc: Resetting bearer <eth:syzkaller0>
[  942.972787][T24166] tipc: Resetting bearer <eth:syzkaller0>
[  943.297782][T24166] tipc: Disabling bearer <eth:syzkaller0>
[  943.773782][T24204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6938'.
[  943.773807][T24204] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6938'.
[  943.795982][T24202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6939'.
[  944.000189][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6940'.
[  944.000216][T24210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6940'.
[  944.003600][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6940'.
[  944.003626][T24210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6940'.
[  944.206455][T24212] tipc: Started in network mode
[  944.206490][T24212] tipc: Node identity 2ebec0035d49, cluster identity 4711
[  944.206691][T24212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  944.212700][T24212] syzkaller0: entered promiscuous mode
[  944.212730][T24212] syzkaller0: entered allmulticast mode
[  944.468770][T24218] tipc: Resetting bearer <eth:syzkaller0>
[  944.637535][T24211] tipc: Resetting bearer <eth:syzkaller0>
[  944.862814][T24224] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6943'.
[  944.862843][T24224] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6943'.
[  944.939630][T24211] tipc: Disabling bearer <eth:syzkaller0>
[  944.962206][T24228] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6945'.
[  945.011533][T24229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6944'.
[  945.250946][T24228] vlan2: entered promiscuous mode
[  945.250975][T24228] dummy0: entered promiscuous mode
[  945.744399][T24249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6950'.
[  945.912880][T24254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6952'.
[  945.913199][T24255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6951'.
[  945.913219][T24255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6951'.
[  946.400688][T24267] netlink: 'syz.2.6955': attribute type 1 has an invalid length.
[  946.809999][T24279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6958'.
[  947.183252][T24284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6960'.
[  947.370886][T24284] vlan2: entered promiscuous mode
[  947.370914][T24284] dummy0: entered promiscuous mode
[  948.927459][T24318] netlink: 'syz.1.6974': attribute type 12 has an invalid length.
[  949.076274][ T5839] Bluetooth: hci6: command 0x0405 tx timeout
[  950.701353][T24365] __nla_validate_parse: 3 callbacks suppressed
[  950.701377][T24365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6992'.
[  950.874905][T24365] bond0: entered promiscuous mode
[  950.874931][T24365] bond_slave_0: entered promiscuous mode
[  950.875396][T24365] bond_slave_1: entered promiscuous mode
[  950.883966][T24365] gretap0: entered promiscuous mode
[  950.910417][T24365] hsr1: entered promiscuous mode
[  951.225071][ T5839] Bluetooth: hci6: command 0x0405 tx timeout
[  953.525186][T24414] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20004
[  953.607741][T24418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7012'.
[  953.607767][T24418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7012'.
[  954.328307][T24427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7015'.
[  954.328333][T24427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7015'.
[  954.512035][T18017] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  954.513100][T18017] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  954.513159][T18017] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  954.513200][T18017] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  954.515107][T24427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7015'.
[  954.515130][T24427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7015'.
[  955.228910][T24442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7021'.
[  955.228947][T24442] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  955.544807][ T5839] Bluetooth: hci6: command 0x0405 tx timeout
[  955.690073][T24455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7026'.
[  955.690100][T24455] nbd: must specify a device to reconfigure
[  956.281736][T24473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7031'.
[  956.281756][T24473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7031'.
[  956.341612][T24475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7031'.
[  957.677774][T24494] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7038'.
[  957.832196][T24498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7040'.
[  958.328789][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7042'.
[  958.328817][T24502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7042'.
[  958.537860][T24504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7042'.
[  959.028843][T24508] netlink: 388 bytes leftover after parsing attributes in process `syz.6.7044'.
[  960.168376][T24525] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7052'.
[  960.646716][T24531] netdevsim netdevsim1 netdevsim3: entered promiscuous mode
[  960.646762][T24531] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  962.492129][T24565] __nla_validate_parse: 5 callbacks suppressed
[  962.492153][T24565] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7067'.
[  962.857422][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7068'.
[  963.847878][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880645be800: rx timeout, send abort
[  964.348728][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880645be400: rx timeout, send abort
[  964.351706][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880645be800: abort rx timeout. Force session deactivation
[  964.591626][T24605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7082'.
[  964.591673][T24605] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  964.796774][T24609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7084'.
[  964.797562][T24609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7084'.
[  964.848813][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880645be400: abort rx timeout. Force session deactivation
[  965.056497][T24615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7087'.
[  965.133351][T24615] vlan2: entered promiscuous mode
[  965.326482][T24620] sctp: [Deprecated]: syz.8.7089 (pid 24620) Use of struct sctp_assoc_value in delayed_ack socket option.
[  965.326482][T24620] Use struct sctp_sack_info instead
[  965.498230][T24622] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7090'.
[  965.873096][T24636] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7095'.
[  965.885046][T24636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7095'.
[  967.484079][T24669] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7105'.
[  967.536082][T24675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7107'.
[  967.591667][T24680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7107'.
[  967.763310][T24683] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7110'.
[  968.196005][T24683] vlan3: entered promiscuous mode
[  968.257463][T24685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7111'.
[  968.257496][T24685] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[  969.842825][T24718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7122'.
[  969.881520][T24718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7122'.
[  969.951697][ T5839] Bluetooth: hci6: link tx timeout
[  969.952184][ T5839] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  971.068162][T24749] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7136'.
[  971.117136][T24751] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7137'.
[  972.034477][ T5842] Bluetooth: hci6: command 0x0405 tx timeout
[  972.255326][T24771] sctp: [Deprecated]: syz.1.7143 (pid 24771) Use of struct sctp_assoc_value in delayed_ack socket option.
[  972.255326][T24771] Use struct sctp_sack_info instead
[  973.002880][T24792] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.7153'.
[  973.002908][T24792] openvswitch: netlink: Flow actions attr not present in new flow.
[  973.480199][T24801] netlink: 380 bytes leftover after parsing attributes in process `syz.6.7155'.
[  973.481248][T24803] netlink: 380 bytes leftover after parsing attributes in process `syz.2.7156'.
[  974.771554][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7164'.
[  974.771582][T24821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7164'.
[  974.773319][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7164'.
[  974.773341][T24821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7164'.
[  974.814849][T24822] openvswitch: netlink: Flow actions attr not present in new flow.
[  975.400993][T24830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7167'.
[  975.464471][T24830] vlan3: entered promiscuous mode
[  975.986708][T24844] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.7172'.
[  975.986734][T24844] openvswitch: netlink: Flow actions attr not present in new flow.
[  976.889770][T24852] netlink: 380 bytes leftover after parsing attributes in process `syz.1.7175'.
[  978.840238][T24890] __nla_validate_parse: 1 callbacks suppressed
[  978.840262][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7193'.
[  978.840278][T24890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7193'.
[  979.253652][T24901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7195'.
[  979.253682][T24901] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[  980.777162][T24937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7207'.
[  980.777329][T24937] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[  981.225880][T24943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7210'.
[  981.225907][T24943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7210'.
[  981.692516][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7213'.
[  981.692545][T24952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7213'.
[  981.693988][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7213'.
[  981.694004][T24952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7213'.
[  982.213451][T24964] bond0: entered promiscuous mode
[  982.213478][T24964] bond_slave_0: entered promiscuous mode
[  982.214431][T24964] bond_slave_1: entered promiscuous mode
[  982.234723][T24964] gretap0: entered promiscuous mode
[  982.239237][T24964] debugfs: 'hsr1' already exists in 'hsr'
[  982.239273][T24964] Cannot create hsr debugfs directory
[  982.239684][T24964] hsr1: entered promiscuous mode
[  982.557261][T24976] ieee802154 phy0 wpan0: encryption failed: -126
[  984.719996][T24956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  985.872058][T24994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  987.021623][T25028] __nla_validate_parse: 3 callbacks suppressed
[  987.021649][T25028] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7234'.
[  987.761554][T25037] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7240'.
[  988.214630][T25046] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7242'.
[  988.214676][T25046] netlink: 292 bytes leftover after parsing attributes in process `syz.6.7242'.
[  988.221068][T25048] ieee802154 phy0 wpan0: encryption failed: -22
[  989.023388][T25061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7250'.
[  989.038465][T25061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7250'.
[  989.102907][T25064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  989.251756][T25071] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7253'.
[  992.280157][ T1146] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  992.280189][ T1146] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  992.831228][ T1146] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  992.831268][ T1146] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  993.207646][ T1146] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  993.207677][ T1146] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  993.251384][T25083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  993.401601][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  993.401678][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  993.509430][T25111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7265'.
[  993.509460][T25111] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[  993.588379][T25114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7264'.
[  993.596947][T25114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7264'.
[  993.619217][T25113] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7266'.
[  994.369519][T25128] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20004
[  995.803084][ T1146] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  995.803127][ T1146] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.908838][T25133] tipc: New replicast peer: 255.255.255.255
[  995.911738][T25133] tipc: Enabled bearer <udp:syz2>, priority 10
[  996.577149][T25152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7278'.
[  996.577181][T25152] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[  996.752376][T25156] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7281'.
[  997.170172][   T31] tipc: Node number set to 1945616387
[  999.025523][T25192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7293'.
[  999.025556][T25192] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[  999.526580][T25205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7296'.
[  999.932334][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880390e7000: rx timeout, send abort
[ 1000.183267][T25211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7299'.
[ 1000.183308][T25211] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7299'.
[ 1000.335925][T25214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7300'.
[ 1000.429067][T25214] bond_slave_0: entered promiscuous mode
[ 1000.429145][T25214] bond_slave_1: entered promiscuous mode
[ 1000.429411][T25214] macvtap1: entered promiscuous mode
[ 1000.446791][T25214] bond0: entered promiscuous mode
[ 1000.462370][T25214] macvtap1: entered allmulticast mode
[ 1000.462394][T25214] bond0: entered allmulticast mode
[ 1000.462408][T25214] bond_slave_0: entered allmulticast mode
[ 1000.462428][T25214] bond_slave_1: entered allmulticast mode
[ 1000.466718][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880390e7000: abort rx timeout. Force session deactivation
[ 1000.606247][T25214] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 1001.498507][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7305'.
[ 1001.498536][T25235] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[ 1003.192690][T25256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7311'.
[ 1003.192743][T25256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7311'.
[ 1004.493803][T25263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7313'.
[ 1004.940558][T25263] macvtap2: entered promiscuous mode
[ 1004.940816][T25263] macvtap2: entered allmulticast mode
[ 1005.039844][T25263] 8021q: adding VLAN 0 to HW filter on device macvtap2
[ 1005.462648][T25282] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[ 1006.848498][ T5895] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1006.987193][ T5895] usb 5-1: device descriptor read/64, error -71
[ 1007.243744][ T5895] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1007.494305][ T5895] usb 5-1: device descriptor read/64, error -71
[ 1007.607616][ T5895] usb usb5-port1: attempt power cycle
[ 1008.162730][ T5895] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1008.193336][ T5895] usb 5-1: device descriptor read/8, error -71
[ 1008.256090][ T1146] bond0 (unregistering): Released all slaves
[ 1008.440654][ T5895] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1008.486499][ T5895] usb 5-1: device descriptor read/8, error -71
[ 1008.583225][ T5480] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1008.601585][ T5895] usb usb5-port1: unable to enumerate USB device
[ 1009.515629][T25329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7327'.
[ 1009.515674][T25329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7327'.
[ 1010.748494][T25344] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[ 1011.953230][T25348] netlink: 'syz.2.7332': attribute type 12 has an invalid length.
[ 1011.987194][T25350] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7333'.
[ 1015.090751][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7341'.
[ 1015.090778][T25384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7341'.
[ 1015.569383][T25391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7342'.
[ 1015.569426][T25391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7342'.
[ 1016.376602][ T5480] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1016.655791][T25404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7346'.
[ 1016.655816][T25404] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7346'.
[ 1016.802696][T25408] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[ 1016.939755][ T1146] hsr_slave_0: left promiscuous mode
[ 1016.984115][ T1146] hsr_slave_1: left promiscuous mode
[ 1017.127953][ T1146] veth1_macvtap: left promiscuous mode
[ 1017.128089][ T1146] veth0_macvtap: left promiscuous mode
[ 1017.182002][ T1146] veth1_vlan: left promiscuous mode
[ 1017.183943][ T1146] veth0_vlan: left promiscuous mode
[ 1018.176032][T25433] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7353'.
[ 1018.312980][    C1] vcan0: j1939_tp_rxtimer: 0xffff888063952000: rx timeout, send abort
[ 1018.931061][    C1] vcan0: j1939_tp_rxtimer: 0xffff888063952000: abort rx timeout. Force session deactivation
[ 1022.587242][ T5480] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1022.798043][T25453] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7358'.
[ 1022.798068][T25453] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7358'.
[ 1024.039113][T25459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7360'.
[ 1024.039143][T25459] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[ 1024.177318][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7363'.
[ 1024.177344][T25466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7363'.
[ 1024.512471][ T5842] Bluetooth: hci2: command 0x041b tx timeout
[ 1025.257756][T25491] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7365'.
[ 1025.468832][T25493] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7368'.
[ 1025.776602][T25499] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7369'.
[ 1027.704530][T25522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7374'.
[ 1027.704562][T25522] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[ 1027.970399][T25530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7376'.
[ 1027.973750][T25530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7376'.
[ 1028.128680][ T5480] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1028.346629][ T1146] ------------[ cut here ]------------
[ 1028.346645][ T1146] in_task() && kcov_mode_enabled(mode)
[ 1028.346664][ T1146] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#1: kworker/u8:10/1146
[ 1028.346989][ T1146] Modules linked in:
[ 1028.347034][ T1146] CPU: 1 UID: 0 PID: 1146 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1028.347061][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1028.347077][ T1146] Workqueue: events_unbound cfg80211_wiphy_work
[ 1028.347197][ T1146] RIP: 0010:kcov_remote_start+0x5d8/0x710
[ 1028.347236][ T1146] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 82 71 dc 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 3a 4a 68 09 89 c0 48 c7 c7 10 e4 72
[ 1028.347257][ T1146] RSP: 0018:ffffc900061ff9d8 EFLAGS: 00010202
[ 1028.347279][ T1146] RAX: 0000000000000002 RBX: ffff8880289a5c40 RCX: 0000000000000000
[ 1028.347295][ T1146] RDX: 0000000000000000 RSI: ffffffff8ba740c0 RDI: ffffffff8ba74080
[ 1028.347311][ T1146] RBP: ffff8880337f2000 R08: ffffffff8b2f2740 R09: ffffffff8dfc80c0
[ 1028.347329][ T1146] R10: dffffc0000000000 R11: fffffbfff1f179df R12: ffff88805d395dc8
[ 1028.347346][ T1146] R13: ffff888032d007c0 R14: 0000000000000000 R15: ffff88805d395de0
[ 1028.347363][ T1146] FS:  0000000000000000(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000
[ 1028.347383][ T1146] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1028.347399][ T1146] CR2: 00007ffc21230a98 CR3: 0000000063622000 CR4: 00000000003526f0
[ 1028.347419][ T1146] Call Trace:
[ 1028.347428][ T1146]  <TASK>
[ 1028.347443][ T1146]  ieee80211_iface_work+0x211/0x1390
[ 1028.347557][ T1146]  cfg80211_wiphy_work+0x2cf/0x460
[ 1028.347586][ T1146]  ? process_scheduled_works+0xa70/0x1860
[ 1028.347773][ T1146]  process_scheduled_works+0xb5d/0x1860
[ 1028.347849][ T1146]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1028.347931][ T1146]  ? assign_work+0x3d5/0x5e0
[ 1028.348000][ T1146]  worker_thread+0xa53/0xfc0
[ 1028.348054][ T1146]  kthread+0x388/0x470
[ 1028.348118][ T1146]  ? __pfx_worker_thread+0x10/0x10
[ 1028.348138][ T1146]  ? __pfx_kthread+0x10/0x10
[ 1028.348169][ T1146]  ret_from_fork+0x514/0xb70
[ 1028.348243][ T1146]  ? __pfx_ret_from_fork+0x10/0x10
[ 1028.348266][ T1146]  ? __switch_to+0xc79/0x1410
[ 1028.348326][ T1146]  ? __pfx_kthread+0x10/0x10
[ 1028.348355][ T1146]  ret_from_fork_asm+0x1a/0x30
[ 1028.348417][ T1146]  </TASK>
[ 1028.348449][ T1146] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1028.348471][ T1146] CPU: 1 UID: 0 PID: 1146 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1028.348497][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1028.348513][ T1146] Workqueue: events_unbound cfg80211_wiphy_work
[ 1028.348540][ T1146] Call Trace:
[ 1028.348549][ T1146]  <TASK>
[ 1028.348558][ T1146]  vpanic+0x56c/0xa60
[ 1028.348592][ T1146]  ? __pfx__printk+0x10/0x10
[ 1028.348623][ T1146]  ? __pfx_vpanic+0x10/0x10
[ 1028.348645][ T1146]  ? is_bpf_text_address+0x292/0x2b0
[ 1028.348750][ T1146]  ? is_bpf_text_address+0x26/0x2b0
[ 1028.348789][ T1146]  panic+0xc5/0xd0
[ 1028.348812][ T1146]  ? __pfx_panic+0x10/0x10
[ 1028.348848][ T1146]  ? ret_from_fork_asm+0x1a/0x30
[ 1028.348894][ T1146]  __warn+0x315/0x4c0
[ 1028.348914][ T1146]  ? kcov_remote_start+0x5d8/0x710
[ 1028.348954][ T1146]  ? kcov_remote_start+0x5d8/0x710
[ 1028.348993][ T1146]  __report_bug+0x29a/0x540
[ 1028.349114][ T1146]  ? kcov_remote_start+0x5d8/0x710
[ 1028.349152][ T1146]  ? __pfx___report_bug+0x10/0x10
[ 1028.349181][ T1146]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1028.349244][ T1146]  ? __pfx_rtlock_slowlock_locked+0x10/0x10
[ 1028.349310][ T1146]  ? rt_spin_lock+0x1e0/0x400
[ 1028.349373][ T1146]  ? rt_spin_lock+0x1e0/0x400
[ 1028.349412][ T1146]  ? kcov_remote_start+0x5d8/0x710
[ 1028.349456][ T1146]  report_bug+0x16a/0x220
[ 1028.349483][ T1146]  ? kcov_remote_start+0x5d8/0x710
[ 1028.349519][ T1146]  ? kcov_remote_start+0x5da/0x710
[ 1028.349557][ T1146]  handle_bug+0x9c/0x200
[ 1028.349617][ T1146]  exc_invalid_op+0x1a/0x50
[ 1028.349650][ T1146]  asm_exc_invalid_op+0x1a/0x20
[ 1028.349691][ T1146] RIP: 0010:kcov_remote_start+0x5d8/0x710
[ 1028.349731][ T1146] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 82 71 dc 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 3a 4a 68 09 89 c0 48 c7 c7 10 e4 72
[ 1028.349752][ T1146] RSP: 0018:ffffc900061ff9d8 EFLAGS: 00010202
[ 1028.349773][ T1146] RAX: 0000000000000002 RBX: ffff8880289a5c40 RCX: 0000000000000000
[ 1028.349789][ T1146] RDX: 0000000000000000 RSI: ffffffff8ba740c0 RDI: ffffffff8ba74080
[ 1028.349807][ T1146] RBP: ffff8880337f2000 R08: ffffffff8b2f2740 R09: ffffffff8dfc80c0
[ 1028.349833][ T1146] R10: dffffc0000000000 R11: fffffbfff1f179df R12: ffff88805d395dc8
[ 1028.349851][ T1146] R13: ffff888032d007c0 R14: 0000000000000000 R15: ffff88805d395de0
[ 1028.349883][ T1146]  ? rt_spin_lock+0x1e0/0x400
[ 1028.349929][ T1146]  ? kcov_remote_start+0xe0/0x710
[ 1028.349970][ T1146]  ieee80211_iface_work+0x211/0x1390
[ 1028.350018][ T1146]  cfg80211_wiphy_work+0x2cf/0x460
[ 1028.350046][ T1146]  ? process_scheduled_works+0xa70/0x1860
[ 1028.350084][ T1146]  process_scheduled_works+0xb5d/0x1860
[ 1028.350160][ T1146]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1028.350206][ T1146]  ? assign_work+0x3d5/0x5e0
[ 1028.350249][ T1146]  worker_thread+0xa53/0xfc0
[ 1028.350376][ T1146]  kthread+0x388/0x470
[ 1028.350418][ T1146]  ? __pfx_worker_thread+0x10/0x10
[ 1028.350440][ T1146]  ? __pfx_kthread+0x10/0x10
[ 1028.350471][ T1146]  ret_from_fork+0x514/0xb70
[ 1028.350498][ T1146]  ? __pfx_ret_from_fork+0x10/0x10
[ 1028.350522][ T1146]  ? __switch_to+0xc79/0x1410
[ 1028.350560][ T1146]  ? __pfx_kthread+0x10/0x10
[ 1028.350591][ T1146]  ret_from_fork_asm+0x1a/0x30
[ 1028.350639][ T1146]  </TASK>
[ 1028.350810][ T1146] Kernel Offset: disabled